CVE-2011-1182: kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call

Unscored severity · published Mar 1, 2013

CVE-2011-1182

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call

–

CVSS

0.5%

EPSS

On KEV

Description

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 42% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Kernel · Linux

before 2.6.39 · source: NVD

Enterprise Linux · Redhat

5.0 · source: NVD

Enterprise Linux Aus · Redhat

5.6 · source: NVD

Enterprise Linux Desktop · Redhat

5.0 · source: NVD

Enterprise Linux Eus · Redhat

5.6 · source: NVD

Enterprise Linux Server · Redhat

5.0 · source: NVD

Enterprise Linux Workstation · Redhat

5.0 · source: NVD

Affected product

Kernel

Linux

All Kernel CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2011-1182

CVE.org

https://www.cve.org/CVERecord?id=CVE-2011-1182

Third Party Advisory

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39

git.kernel.org

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=da48524eb20662618854bb3df2db01fc65f3070c

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2011-0927.html

Mailing List

http://www.openwall.com/lists/oss-security/2011/03/23/2

Issue Tracking

https://bugzilla.redhat.com/show_bug.cgi?id=690028

Exploit

https://github.com/torvalds/linux/commit/da48524eb20662618854bb3df2db01fc65f3070c