Vulnerability Details CVE-2011-1474
A locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79.patch, 2.6.38-test3.patch, and 2.6.37.4-test14.patch. A bad bounds check in arch_get_unmapped_area_topdown triggered by programs doing an mmap after a MAP_GROWSDOWN mmap will create an infinite loop condition without releasing the VM semaphore eventually leading to a system crash.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.6%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.9
References
Products affected by CVE-2011-1474
-
cpe:2.3:o:linux:linux_kernel:2.6.32.33
-
cpe:2.3:o:linux:linux_kernel:2.6.37.4
-
cpe:2.3:o:linux:linux_kernel:2.6.38