Unscored severity · published Apr 10, 2011
CVE-2011-1163
The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
before 2.6.38 · source: NVD
EL
Enterprise Linux Desktop · Redhat
5.0; 6.0 · source: NVD
EL
Enterprise Linux Eus · Redhat
5.6 · source: NVD
EL
Enterprise Linux Server · Redhat
5.0; 6.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
5.6 · source: NVD
EL
Enterprise Linux Workstation · Redhat
5.0; 6.0 · source: NVD
LE
Linux Enterprise Server · Suse
10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1163
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1163
Third Party Advisory
http://downloads.avaya.com/css/P8/documents/100145416
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
Mailing List
http://openwall.com/lists/oss-security/2011/03/15/14
Mailing List
http://openwall.com/lists/oss-security/2011/03/15/9
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-0833.html
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability