CVE-2011-2707 Information disclosure in n/a
Local attackers can read sensitive kernel memory via crafted ptrace requests due to missing pointer validation in the Linux kernel.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2011-2707?
CVE-2011-2707 is a medium-severity vulnerability in Linux kernel, published on 24 May 2012. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allows local users to obtain sensitive information from kernel memory locations via a crafted PTRACE_SETXTREGS request.
Weakness: CWE-200
Which versions are affected by CVE-2011-2707?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2011-2707?
No fix has been published for CVE-2011-2707 yet. Limit exposure of the affected software until one is available.
Is CVE-2011-2707 being exploited?
There is no known exploitation of CVE-2011-2707 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-3x44-c8w2-mxwg.