4.7
CVSSv2

CVE-2011-1479

Published: 21/06/2012 Updated: 07/11/2023
CVSS v2 Base Score: 4.7 | Impact Score: 6.9 | Exploitability Score: 3.4
VMScore: 475
Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C

Vulnerability Summary

Double free vulnerability in the inotify subsystem in the Linux kernel prior to 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 2.6.38

linux linux kernel 2.6.38.3

linux linux kernel

linux linux kernel 2.6.38.6

linux linux kernel 2.6.38.1

linux linux kernel 2.6.38.5

linux linux kernel 2.6.38.2

linux linux kernel 2.6.38.4

linux linux kernel 2.6.38.7

Vendor Advisories

Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Multiple kernel flaws have been fixed ...
Multiple kernel flaws have been fixed ...

Exploits

/* source: wwwsecurityfocuscom/bid/47296/info The Linux kernel is prone to a local denial-of-service vulnerability Attackers can exploit this issue to cause an out-of-memory condition, denying service to legitimate users */ #include <sys/inotifyh> #include <unistdh> int main(int argc, char *argv[]) { int fds[2] ...