CVE-2011-3637
Publication date 12 January 2012
Last updated 24 July 2024
Ubuntu priority
Cvss 3 Severity Score
The m_stop function in fs/proc/task_mmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (OOPS) via vectors that trigger an m_start error.
From the Ubuntu Security Team
A flaw was found in the Linux kernel’s /proc/*/*map* interface. A local, unprivileged user could exploit this flaw to cause a denial of service.
Status
Package | Ubuntu Release | Status |
---|---|---|
linux | 12.10 quantal |
Not affected
|
12.04 LTS precise |
Not affected
|
|
11.10 oneiric |
Not affected
|
|
11.04 natty |
Fixed 2.6.38-11.49
|
|
10.10 maverick |
Fixed 2.6.35-30.58
|
|
10.04 LTS lucid |
Fixed 2.6.32-34.74
|
|
8.04 LTS hardy |
Not affected
|
|
linux-armadaxp | 12.10 quantal |
Not affected
|
12.04 LTS precise |
Not affected
|
|
11.10 oneiric | Not in release | |
11.04 natty | Not in release | |
10.04 LTS lucid | Not in release | |
8.04 LTS hardy | Not in release | |
linux-ec2 | 12.10 quantal | Not in release |
12.04 LTS precise | Not in release | |
11.10 oneiric | Not in release | |
11.04 natty | Not in release | |
10.10 maverick | Ignored end of life | |
10.04 LTS lucid |
Fixed 2.6.32-318.37
|
|
8.04 LTS hardy | Not in release | |
linux-fsl-imx51 | 12.10 quantal | Not in release |
12.04 LTS precise | Not in release | |
11.10 oneiric | Not in release | |
11.04 natty | Not in release | |
10.10 maverick | Not in release | |
10.04 LTS lucid |
Fixed 2.6.31-610.28
|
|
8.04 LTS hardy | Not in release | |
linux-lts-backport-maverick | 12.10 quantal | Not in release |
12.04 LTS precise | Not in release | |
11.10 oneiric | Not in release | |
11.04 natty | Not in release | |
10.10 maverick | Not in release | |
10.04 LTS lucid |
Fixed 2.6.35-30.58~lucid1
|
|
8.04 LTS hardy | Not in release | |
linux-lts-backport-natty | 12.10 quantal | Not in release |
12.04 LTS precise | Not in release | |
11.10 oneiric | Not in release | |
11.04 natty | Not in release | |
10.10 maverick | Not in release | |
10.04 LTS lucid |
Fixed 2.6.38-11.49~lucid1
|
|
8.04 LTS hardy | Not in release | |
linux-lts-backport-oneiric | 12.10 quantal | Not in release |
12.04 LTS precise | Not in release | |
11.10 oneiric | Not in release | |
11.04 natty | Not in release | |
10.10 maverick | Not in release | |
10.04 LTS lucid |
Not affected
|
|
8.04 LTS hardy | Not in release | |
linux-mvl-dove | 12.10 quantal | Not in release |
12.04 LTS precise | Not in release | |
11.10 oneiric | Not in release | |
11.04 natty | Not in release | |
10.10 maverick |
Fixed 2.6.32-418.35
|
|
10.04 LTS lucid |
Fixed 2.6.32-218.35
|
|
8.04 LTS hardy | Not in release | |
linux-ti-omap4 | 12.10 quantal |
Not affected
|
12.04 LTS precise |
Not affected
|
|
11.10 oneiric |
Not affected
|
|
11.04 natty |
Fixed 2.6.38-1209.15
|
|
10.10 maverick |
Fixed 2.6.35-903.24
|
|
10.04 LTS lucid | Not in release | |
8.04 LTS hardy | Not in release |
Severity score breakdown
Parameter | Value |
---|---|
Base score |
|
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Unchanged |
Confidentiality | None |
Integrity impact | None |
Availability impact | High |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
References
Related Ubuntu Security Notices (USN)
- USN-1204-1
- Linux kernel (i.MX51) vulnerabilities
- 13 September 2011
- USN-1208-1
- Linux kernel (Marvel DOVE) vulnerabilities
- 14 September 2011
- USN-1205-1
- Linux kernel (Maverick backport) vulnerabilities
- 13 September 2011
- USN-1202-1
- Linux kernel (OMAP4) vulnerabilities
- 13 September 2011
- USN-1211-1
- Linux kernel vulnerabilities
- 21 September 2011
- USN-1203-1
- Linux kernel (Marvel DOVE) vulnerabilities
- 13 September 2011
- USN-1218-1
- Linux kernel vulnerabilities
- 29 September 2011
- USN-1256-1
- Linux kernel (Natty backport) vulnerabilities
- 9 November 2011
- USN-1201-1
- Linux kernel vulnerabilities
- 13 September 2011
- USN-1212-1
- Linux kernel (OMAP4) vulnerabilities
- 21 September 2011
- USN-1216-1
- Linux kernel (EC2) vulnerabilities
- 26 September 2011