CVE-2011-0711 Information disclosure in n/a

Low 2.1 Published Updated

Local attackers can read sensitive kernel stack memory via an FSGEOMETRY_V1 ioctl call due to uninitialized structure members in the XFS filesystem.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2011-0711?

CVE-2011-0711 is a low-severity vulnerability in Linux kernel, published on 1 Mar 2011. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRY_V1 ioctl call.

Weakness: CWE-200

Which versions are affected by CVE-2011-0711?

It affects 6 products.

Products include Linux kernel, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus, Redhat Enterprise Linux Server Eus, Redhat Enterprise Linux Workstation.

How do I fix CVE-2011-0711?

Apply the vendor's patch.

Is CVE-2011-0711 being exploited?

There is no known exploitation of CVE-2011-0711 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as GHSA-3w2w-4v6h-c6q9.

Is CVE-2011-0711 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free