CVE-2011-5321: Null Pointer Dereference
Linux kernel built with the virtual console support(CONFIGVT) is vulnerable to a NULL pointer dereference issue. It could occur while accessing pseudo terminal device(/dev/pts/) files.
An unprivileged user could use this flaw to crash the system kernel resulting in DoS.
Upstream fix: ------------- -> https://git.kernel.org/linus/c290f8358acaeffd8e0c551ddcc24d1206143376
Other sources
The ttyopen function in drivers/tty/ttyio.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted access to a device file under the /dev/pts directory.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-5321?
CVE-2011-5321 is classified as a moderate severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2011-5321?
To fix CVE-2011-5321, update your Linux kernel to version 3.1.1 or later, where the issue has been addressed.
Who is affected by CVE-2011-5321?
CVE-2011-5321 affects all Linux kernel versions prior to 3.1.1 that are built with virtual console support.
What is the impact of CVE-2011-5321?
The impact of CVE-2011-5321 is a potential denial of service, allowing an unprivileged user to crash the system.
What actions can unprivileged users take with CVE-2011-5321?
Unprivileged users can exploit CVE-2011-5321 to trigger a NULL pointer dereference and crash the system kernel.