CVE-2011-2909: Infoleak
Published Feb 15, 2014
·Updated
Last updated 24 July 2024
Other sources
The dodevinfoioctl function in drivers/staging/comedi/comedifops.c in the Linux kernel before 3.1 allows local users to obtain sensitive information from kernel memory via a copy of a short string.
Affected Software
52 affected components
debian/linux-2.6
Linux Linux kernel=3.0.25
Linux Linux kernel=3.0-rc2
Linux Linux kernel=3.0.22
Linux Linux kernel=3.0.5
Linux Linux kernel=3.0-rc7
Linux Linux kernel=3.0.38
Linux Linux kernel<=3.0.44
Linux Linux kernel=3.0.18
Linux Linux kernel=3.0.6
Linux Linux kernel=3.0.36
Linux Linux kernel=3.0.35
Linux Linux kernel=3.0-rc4
Linux Linux kernel=3.0.11
Linux Linux kernel=3.0.34
Linux Linux kernel=3.0.32
Linux Linux kernel=3.0.19
Linux Linux kernel=3.0.37
Linux Linux kernel=3.0.4
Linux Linux kernel=3.0.27
Linux Linux kernel=3.0-rc6
Linux Linux kernel=3.0.42
Linux Linux kernel=3.0.23
Linux Linux kernel=3.0.8
Linux Linux kernel=3.0-rc3
Linux Linux kernel=3.0.40
Linux Linux kernel=3.0.33
Linux Linux kernel=3.0.28
Linux Linux kernel=3.0-rc1
Linux Linux kernel=3.0.13
Linux Linux kernel=3.0.10
Linux Linux kernel=3.0-rc5
Linux Linux kernel=3.0.1
Linux Linux kernel=3.0.17
Linux Linux kernel=3.0.16
Linux Linux kernel=3.0.21
Linux Linux kernel=3.0.7
Linux Linux kernel=3.0.20
Linux Linux kernel=3.0.24
Linux Linux kernel=3.0.15
Linux Linux kernel=3.0.39
Linux Linux kernel=3.0.2
Linux Linux kernel=3.0.12
Linux Linux kernel=3.0.3
Linux Linux kernel=3.0.9
Linux Linux kernel=3.0.26
Linux Linux kernel=3.0.43
Linux Linux kernel=3.0.30
Linux Linux kernel=3.0.31
Linux Linux kernel=3.0.29
Linux Linux kernel=3.0.14
Linux Linux kernel=3.0.41
Remediation
Event History
Feb 15, 2014
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·09:58 PM
Description
Sep 15, 2024
Data Sourced
via Ubuntu·10:48 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-2909?
CVE-2011-2909 has a medium severity rating, allowing local users to exploit it for information disclosure.
2
How do I fix CVE-2011-2909?
To fix CVE-2011-2909, upgrade to Linux kernel version 3.1 or later.
3
What systems are affected by CVE-2011-2909?
CVE-2011-2909 affects Linux kernel versions prior to 3.1, including 3.0 and earlier.
4
Can CVE-2011-2909 be exploited remotely?
No, CVE-2011-2909 requires local user access for exploitation.
5
What type of data exposure does CVE-2011-2909 allow?
CVE-2011-2909 allows local users to obtain sensitive information from kernel memory.