--- title: "CVE-2011-1163\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2011-1163?format=md keywords: index, follow --- # CVE-2011-1163 Publication date 9 April 2011 Last updated 24 July 2024 --- Ubuntu priority **Low** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description The osf\_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing. ### From the Ubuntu Security Team Timo Warns discovered that OSF partition parsing routines did not correctly clear memory. A local attacker with physical access could plug in a specially crafted block device to read kernel memory, leading to a loss of privacy. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | linux | 11.04 natty | Fixed 2.6.38-7.35 | | 10.10 maverick | Fixed 2.6.35-30.55 | | 10.04 LTS lucid | Fixed 2.6.32-33.64 | | 9.10 karmic | Ignored | | 8.04 LTS hardy | Fixed 2.6.24-29.91 | | 6.06 LTS dapper | Not in release | | linux-ec2 | 11.04 natty | Not in release | | 10.10 maverick | Ignored end of life | | 10.04 LTS lucid | Fixed 2.6.32-317.32 | | 9.10 karmic | Ignored end of life | | 8.04 LTS hardy | Not in release | | 6.06 LTS dapper | Not in release | | linux-fsl-imx51 | 11.04 natty | Not in release | | 10.10 maverick | Not in release | | 10.04 LTS lucid | Fixed 2.6.31-610.27 | | 9.10 karmic | Ignored end of life | | 8.04 LTS hardy | Not in release | | 6.06 LTS dapper | Not in release | | linux-lts-backport-maverick | 11.04 natty | Not in release | | 10.10 maverick | Not in release | | 10.04 LTS lucid | Fixed 2.6.35-30.55~lucid1 | | 9.10 karmic | Not in release | | 8.04 LTS hardy | Not in release | | 6.06 LTS dapper | Not in release | | linux-lts-backport-natty | 11.04 natty | Not in release | | 10.10 maverick | Not in release | | 10.04 LTS lucid | Not affected | | 8.04 LTS hardy | Not in release | | linux-mvl-dove | 11.04 natty | Not in release | | 10.10 maverick | Fixed 2.6.32-417.34 | | 10.04 LTS lucid | Fixed 2.6.32-217.34 | | 9.10 karmic | Ignored end of life | | 8.04 LTS hardy | Not in release | | 6.06 LTS dapper | Not in release | | linux-source-2.6.15 | 11.04 natty | Not in release | | 10.10 maverick | Not in release | | 10.04 LTS lucid | Not in release | | 9.10 karmic | Not in release | | 8.04 LTS hardy | Not in release | | 6.06 LTS dapper | Ignored | | linux-ti-omap4 | 11.04 natty | Fixed 2.6.38-1205.6 | | 10.10 maverick | Fixed 2.6.35-903.23 | | 10.04 LTS lucid | Not in release | | 9.10 karmic | Not in release | | 8.04 LTS hardy | Not in release | | 6.06 LTS dapper | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) * [Patch details](https://ubuntu.com/security/CVE-2011-1163?format=md#patch-details) ### Patch details For informational purposes only. We recommend not to cherry-pick updates. [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) | Package | Patch details | | --- | --- | | linux | * Upstream: | ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1163) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2011-1163) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2011-1163) * [Debian](https://security-tracker.debian.org/tracker/CVE-2011-1163) ### Related Ubuntu Security Notices (USN) + [USN-1202-1](https://usn.ubuntu.com/USN-1202-1) + Linux kernel (OMAP4) vulnerabilities + 13 September 2011 + [USN-1183-1](https://usn.ubuntu.com/USN-1183-1) + Linux kernel vulnerabilities + 3 August 2011 + [USN-1170-1](https://usn.ubuntu.com/USN-1170-1) + Linux kernel vulnerabilities + 15 July 2011 + [USN-1168-1](https://usn.ubuntu.com/USN-1168-1) + Linux kernel vulnerabilities + 15 July 2011 + [USN-1162-1](https://usn.ubuntu.com/USN-1162-1) + Linux kernel vulnerabilities (Marvell Dove) + 29 June 2011 + [USN-1204-1](https://usn.ubuntu.com/USN-1204-1) + Linux kernel (i.MX51) vulnerabilities + 13 September 2011 + [USN-1187-1](https://usn.ubuntu.com/USN-1187-1) + Linux kernel (Maverick backport) vulnerabilities + 9 August 2011 + [USN-1161-1](https://usn.ubuntu.com/USN-1161-1) + Linux kernel vulnerabilities (EC2) + 13 July 2011 + [USN-1159-1](https://usn.ubuntu.com/USN-1159-1) + Linux kernel vulnerabilities (Marvell Dove) + 13 July 2011 ### Other references *