CVE-2011-2213: Medium severity linux kernel vulnerability
A malicious user or buggy application can inject code and trigger an infinite loop in inetdiagbcaudit()
Also make sure each instruction is aligned on 4 bytes boundary, to avoid unaligned accesses.
http://thread.gmane.org/gmane.linux.network/197206/focus=197386 http://patchwork.ozlabs.org/patch/100857/
Acknowledgements:
Red Hat would like to thank Dan Rosenberg for reporting this issue.
Other sources
The inetdiagbcaudit function in net/ipv4/inetdiag.c in the Linux kernel before 2.6.39.3 does not properly audit INETDIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INETDIAGREQBYTECODE instructions in a netlink message, as demonstrated by an INETDIAGBCJMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2213?
CVE-2011-2213 is considered a high severity vulnerability due to its potential to allow code injection and trigger an infinite loop.
How do I fix CVE-2011-2213?
To fix CVE-2011-2213, users should upgrade to a patched version of the Linux kernel where the vulnerability has been addressed.
Which software is affected by CVE-2011-2213?
CVE-2011-2213 affects various versions of the Linux kernel, particularly those prior to 2.6.39.3.
What are the potential impacts of CVE-2011-2213?
The potential impacts include system instability and denial of service caused by an infinite loop triggered by malicious users or applications.
Is CVE-2011-2213 a common vulnerability?
CVE-2011-2213 is known to have been exploited in specific conditions, making it a significant concern for users of affected Linux versions.