CVE-2011-1162: Infoleak
CVE-2011-1162 [PATCH 3/3] char/tpm: zero buffer after copying to userspace http://tpmdd.git.sourceforge.net/git/gitweb.cgi?p=tpmdd/tpmdd;a=commitdiff;h=44480e4077cd782aa8f54eb472b292547f030520 prevents storing of previous result, leakage to other drivers
[Update 2011-10-11] CVE-2011-1161 rejected. Please see comment #14 for more info.
Acknowledgements:
Red Hat would like to thank Peter Huewe for reporting this issue.
Other sources
The tpmread function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1162?
CVE-2011-1162 has a moderate severity rating as it involves a potential information leak in the Linux kernel.
How do I fix CVE-2011-1162?
To fix CVE-2011-1162, you should apply the appropriate patches provided for the affected Linux kernel versions.
Which systems are affected by CVE-2011-1162?
CVE-2011-1162 affects systems running Linux kernel version 2.6.
What type of vulnerability is CVE-2011-1162?
CVE-2011-1162 is classified as a memory corruption vulnerability due to improper handling of user space buffers.
Is CVE-2011-1162 exploitable remotely?
CVE-2011-1162 is typically not considered remotely exploitable as it requires a local user to trigger the vulnerability.