CVE-2011-1160: Infoleak
[PATCH 1/3] char/tpm: Fix uninitialized usage of data buffer http://tpmdd.git.sourceforge.net/git/gitweb.cgi?p=tpmdd/tpmdd;a=commitdiff;h=459e0537ebb7b786cd29a26f4e41c721632cd840 infoleak
[PATCH 2/3] char/tpm: Call tpmtransmit with correct size http://tpmdd.git.sourceforge.net/git/gitweb.cgi?p=tpmdd/tpmdd;a=commitdiff;h=f0bbed1ee49a4779dfb32159fea669ced8789336 infoleak
[PATCH 3/3] char/tpm: zero buffer after copying to userspace http://tpmdd.git.sourceforge.net/git/gitweb.cgi?p=tpmdd/tpmdd;a=commitdiff;h=44480e4077cd782aa8f54eb472b292547f030520 prevents storing of previous result, leakage to other drivers
Acknowledgements:
Red Hat would like to thank Peter Huewe for reporting this issue.
Other sources
The tpmopen function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1160?
CVE-2011-1160 is considered a 'low' severity vulnerability.
How do I fix CVE-2011-1160?
To fix CVE-2011-1160, update your Linux kernel to version 2.6.38.8 or later.
What systems are affected by CVE-2011-1160?
CVE-2011-1160 affects the Linux kernel versions prior to 2.6.38.8.
What type of vulnerability is CVE-2011-1160?
CVE-2011-1160 is classified as an uninitialized data usage vulnerability.
Can CVE-2011-1160 be exploited remotely?
CVE-2011-1160 is not typically exploitable remotely; it requires local access.