CVE-2011-4110: Null Pointer Dereference
A flaw was found in the way Linux kernel handled user-defined key types. An unprivileged local user could use this flaw to crash the system.
Reference: https://lkml.org/lkml/2011/11/15/363
Other sources
The userupdate function in security/keys/userdefined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2011-4110?
CVE-2011-4110 is classified as a medium severity vulnerability due to its potential to crash the system when exploited by an unprivileged user.
How do I fix CVE-2011-4110?
To fix CVE-2011-4110, update the Linux kernel to versions 2.6.18-274.12.1.el5, 2.6.32-220.el6, or other remedial versions listed for your Linux distribution.
Which systems are affected by CVE-2011-4110?
CVE-2011-4110 affects specific versions of the Linux kernel including 2.6.18, 2.6.32, and others as indicated in the vulnerability details.
Can CVE-2011-4110 be exploited remotely?
No, CVE-2011-4110 requires local access because it involves an unprivileged local user exploiting the flaw.
What type of vulnerability is CVE-2011-4110?
CVE-2011-4110 is a denial of service vulnerability that impacts the stability of the Linux kernel.