CVE-2011-4110 : The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of

The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."

Published 2012-01-27 15:55:04

Updated 2023-02-13 04:32:45

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Threat overview for CVE-2011-4110

Top countries where our scanners detected CVE-2011-4110

Top open port discovered on systems with this issue 80

IPs affected by CVE-2011-4110 20,789

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2011-4110!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2011-4110

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2011-4110

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

CWE ids for CVE-2011-4110

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2011-4110

https://bugzilla.redhat.com/show_bug.cgi?id=751297

751297 – (CVE-2011-4110) CVE-2011-4110 kernel: keys: NULL pointer deref in the user-defined key type
Patch
http://www.securityfocus.com/bid/50755

Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability
http://www.openwall.com/lists/oss-security/2011/11/22/6

oss-security - Re: CVE-2011-4110 kernel: keys: NULL pointer deref in the user-defined key type
http://www.ubuntu.com/usn/USN-1324-1

USN-1324-1: Linux kernel (EC2) vulnerabilities | Ubuntu security notices

CVEs referencing this url
https://lkml.org/lkml/2011/11/15/363

LKML: David Howells: [PATCH] KEYS: Fix a NULL pointer deref in the user-defined key type
Exploit
http://www.ubuntu.com/usn/USN-1344-1

USN-1344-1: Linux kernel vulnerabilities | Ubuntu security notices

CVEs referencing this url
http://www.openwall.com/lists/oss-security/2011/11/21/19

oss-security - CVE-2011-4110 kernel: keys: NULL pointer deref in the user-defined key type
http://www.ubuntu.com/usn/USN-1328-1

USN-1328-1: Linux kernel (Marvell DOVE) vulnerabilities | Ubuntu security notices

CVEs referencing this url
http://www.openwall.com/lists/oss-security/2011/11/22/5

oss-security - Re: CVE-2011-4110 kernel: keys: NULL pointer deref in the user-defined key type
http://marc.info/?l=bugtraq&m=139447903326211&w=2

'[security bulletin] HPSBGN02970 rev.1 - HP Rapid Deployment Pack (RDP) or HP Insight Control Server ' - MARC

CVEs referencing this url

Products affected by CVE-2011-4110