CVE-2011-2210
LowThe osf_getsysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform does not properly restrict the data size for GSI_GET_HWRPB operations, which allows local users to obtain sensitive information from kernel memory via a crafted call.
CVSS 2.0 score
2.1
AV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness type
CWE-264CVE-2011-2210 is a Permissions, Privileges and Access Control vulnerability
What is Permissions, Privileges and Access Control?
Weaknesses in this category are related to the management of permissions, privileges, and access controls. Learn more on MITRE CWE
References
4 total-
Exploit Patch
-
-
-
Frequently asked questions
-
What is CVE-2011-2210?
CVE-2011-2210 is a Low severity Linux kernel vulnerability with a CVSS score of 2.1 out of 10 , classified as a Permissions, Privileges and Access Control flaw (CWE-264) . CVE-2011-2210 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2011-2210?
CVE-2011-2210 has a CVSS score of 2.1 out of 10, rated Low severity (CVSS 2.0). The vector string is
AV:L/AC:L/Au:N/C:P/I:N/A:N. -
Is there a patch available for CVE-2011-2210?
Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2011-2210 patch availability.
-
Is CVE-2011-2210 actively exploited?
No. CVE-2011-2210 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.