NULL pointer dereference vulnerability in Linux kernel's tty_open function

CVE-2011-5321 · MEDIUM Severity

AV:L/AC:L/AU:N/C:N/I:N/A:C

The tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted access to a device file under the /dev/pts directory.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.