CVE-2011-2518: Input Validation

Published May 24, 2012
·
Updated

Last updated 24 July 2024

Other sources

The tomoyomountacl function in security/tomoyo/mount.c in the Linux kernel before 2.6.39.2 calls the kernpath function with arguments taken directly from a mount system call, which allows local users to cause a denial of service (OOPS) or possibly have unspecified other impact via a NULL value for the device name.

Affected Software

2 affected components
debian/linux-2.6
Linux Linux kernel<2.6.39.2

Event History

May 24, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·09:58 PM
Description
Sep 20, 2024
Data Sourced
via Ubuntu·12:44 AM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2011-2518?

CVE-2011-2518 has been classified as a high severity vulnerability due to its potential for causing denial of service.

2

How do I fix CVE-2011-2518?

To fix CVE-2011-2518, you should upgrade your Linux kernel to version 2.6.39.2 or later.

3

Who is affected by CVE-2011-2518?

CVE-2011-2518 affects local users on versions of the Linux kernel prior to 2.6.39.2.

4

What is the main issue caused by CVE-2011-2518?

The main issue caused by CVE-2011-2518 is a potential denial of service due to improper handling of arguments in the mount system call.

5

Is CVE-2011-2518 still a threat?

As of now, CVE-2011-2518 poses no threat to systems running an updated and patched kernel version 2.6.39.2 or newer.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203