CVE-2011-4611

Published: 15 December 2011

Integer overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service (unhandled performance monitor exception) via vectors that trigger certain outcomes of performance events.

From the Ubuntu security team

Maynard Johnson discovered that on POWER7, certain speculative events may raise a performance monitor exception. A local attacker could exploit this to crash the system, leading to a denial of service.

Status

Notes

may not apply to Ubuntu. See redhat bug

note this can only affect power systems, therefore none of the
arm branches can express the issue and so are not-affected

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4611
• https://ubuntu.com/security/notices/USN-1160-1
• https://ubuntu.com/security/notices/USN-1141-1
• https://ubuntu.com/security/notices/USN-1162-1
• https://ubuntu.com/security/notices/USN-1159-1
• https://ubuntu.com/security/notices/USN-1187-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=767914
• https://launchpad.net/bugs/905070