TI-2011-01555 Aliases CVE-2011-1776 GHSA-568c-8p2x-qrp5

The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does…

LOW 28CWE-119Published 2011-09-06 · Updated 2024-08-06

Key facts

Attack vector: Physical
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · None · High
Fix status: Partial Red Hat: 3 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allows physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577.

Why it matters now

EPSS 0.00542 45th percentileScored 2026-11-07

Fix Partial Red Hat: 3 advisoriesRed Hat: 3 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 6

CPE	Versions	Role	Vendor
cpe:2.3:o:linux:linux_kernel::::::::	before 2.6.39	Vulnerable	Linux
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::*	5.0	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::*	5.0	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:5.6:::::::*	5.6	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:5.6:::::::*	5.6	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:::::::*	5.0	Vulnerable	Red Hat

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions before 2.6.39 Vulnerable ·Linux
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:5.6:*:*:*:*:*:*:* Versions 5.6 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:5.6:*:*:*:*:*:*:* Versions 5.6 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat

Remediation

Red Hat 3 advisories

RHSA-2011:1253 Released 2011-09-12 · Red Hat rating Important
kernel-rt security and bug fix update
- Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt-2.6.33.9-rt31.75.el6rt, kernel-rt-debug-2.6.33.9-rt31.75.el6rt, kernel-rt-debug-devel-2.6.33.9-rt31.75.el6rt +7
RHSA-2011:1189 Released 2011-08-23 · Red Hat rating Important
kernel security, bug fix, and enhancement update
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-131.12.1.el6, kernel-bootwrapper-2.6.32-131.12.1.el6, kernel-debug-2.6.32-131.12.1.el6 +8
RHSA-2011:0927 Released 2011-07-15 · Red Hat rating Important
kernel security and bug fix update
- Red Hat Enterprise Linux (v. 5.6.z server) kernel-2.6.18-238.19.1.el5, kernel-2.6.18-238.19.1.el5.ia64, kernel-PAE-2.6.18-238.19.1.el5 +14

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise MRG 1	Affected	No fix yet
Red Hat Enterprise Linux (v. 5.6.z server)	Fixed	RHSA-2011:0927
Red Hat Enterprise Linux Server (v. 6)	Fixed	RHSA-2011:1189
Red Hat MRG Realtime for RHEL 6 Server v.2	Fixed	RHSA-2011:1253

Timeline

2026-10-02 Threatist record created from CVE-2011-1776
2026-10-03 Alias added: GHSA-568c-8p2x-qrp5

References

Patch 2

Advisory 4

Other 1

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa039d5f6b126fbd65eefa05db2f67e44df8f121

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences