CVE-2011-1776

The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID…

published September 6, 2011

CVSS
—
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allows physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00542 · 44.5th percentile
Published
2011-09-06T16:00Z
EPSS history
Timeline
  • 06 SEP 16:00Z
    The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID…
    cvelistv5