CVE-2011-2707

CVSS v3.1 6 (Medium)

CVSS v2.0 3.6 (Low)

EPSS 0.04 % (5^th)

Affected Products 1

Advisories 1

The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allows local users to obtain sensitive information from kernel memory locations via a crafted PTRACE_SETXTREGS request.

Weaknesses

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE Status: PUBLISHED
CNA: Red Hat, Inc.
Published Date: 2012-05-24 23:55:02
(12 years ago)
Updated Date: 2023-02-13 01:20:11
(19 months ago)

Affected Products

Linux

Linux Kernel

Configuration #1

		CPE23	From	Up To
	Linux Kernel prior 3.1 version	cpe:2.3:o:linux:linux_kernel		< 3.1