CVE-2011-0711

Linux Kernel < 2.6.38 - Information Disclosure via xfs_fs_geometry FSGEOMETRY_V1 Ioctl

Title source: llm
STIX 2.1

Description

The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRY_V1 ioctl call.

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/46417
Patch, Vendor Advisory x_refsource_confirm
https://patchwork.kernel.org/patch/555461/
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2011-0927.html
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=677260
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/02/16/10
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/02/16/4
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/70950

Scores

EPSS 0.0040
EPSS Percentile 31.7%

Details

CWE
CWE-200
Status published
Products (7)
linux/linux_kernel 2.6.38 (6 CPE variants)
linux/linux_kernel < 2.6.38
redhat/enterprise_linux_desktop 5.0
redhat/enterprise_linux_server 5.0
redhat/enterprise_linux_server_aus 5.6
redhat/enterprise_linux_server_eus 5.6
redhat/enterprise_linux_workstation 5.0
Published Mar 01, 2011
Tracked Since Feb 18, 2026