Back
CVE-2011-1163
The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of…
Low2.1EPSS 0.41%
- Published
- Updated
- Reserved
- Assigned by
- redhat
Description
The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Low2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
- EPSS (exploitation in 30 days)
- 0.41% · top 64% of all CVEs (2 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.1.
Weakness
Affected products
n/a
- affected n/a
References (14)
- [mm-commits] 20110314 + fs-partitions-osfc-corrupted-osf-partition-table-can-cause-information-disclosure.patch added to -mm tree (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- 46878 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05 (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://bugzilla.redhat.com/show_bug.cgi?id=688021 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 8189 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
- 1025225 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- [oss-security] 20110315 Re: CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosure (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- RHSA-2011:0833 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- [oss-security] 20110315 CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosure (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt (opens in a new tab)x_refsource_MISCx_transferred
- http://downloads.avaya.com/css/P8/documents/100145416 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 20110317 [PRE-SA-2011-02] Information disclosure vulnerability in the OSF partition handling code of the Linux kernel (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 (opens in a new tab)x_refsource_CONFIRMx_transferred
- SUSE-SU-2015:0812 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .