CVE-2011-2905: Medium severity linux kernel vulnerability
It was reported [1] that perf would look for configuration files in /etc/perfconfig, ~/.perfconfig, and ./config. If ./config is not a perf configuration file, perf could fail or possibly do unexpected things. If a privileged user was tricked into running perf in a directory containing a malicious ./config file, it could possibly lead to the execution of arbitrary commands.
A patch is available [2].
[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=632923 [2] http://marc.info/?l=linux-kernel&m=131256355026183
Other sources
Untrusted search path vulnerability in the perfconfig function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2905?
CVE-2011-2905 has a moderate severity rating due to its potential to allow unexpected behavior in the perf tool.
How do I fix CVE-2011-2905?
To fix CVE-2011-2905, update to a newer version of the Linux kernel that does not have this vulnerability.
What systems are affected by CVE-2011-2905?
CVE-2011-2905 affects specific versions of the Linux kernel, particularly those prior to 3.0.68.
What is the impact of CVE-2011-2905?
The impact of CVE-2011-2905 could lead to the perf tool failing or executing potentially harmful actions when run with misleading configurations.
Who should be concerned about CVE-2011-2905?
System administrators and users running affected versions of the Linux kernel should be particularly concerned about CVE-2011-2905.