‹ Back to list

CVE-2011-1479

Status: ModifiedMedium (4.7)—Exploit
Severity4.7Medium · CVSS 2.0
Exploitation probability0.80 %higher than 56% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB

Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.

CVSS

Base score
4.7
Version
2.0
Vector
AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days
0.80 %
Percentile among all scored CVEs
56
Score date
10/20/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Public exploits

Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.

Affected technologies (1)

Linux — Linux Kernel

CWEs

References

Show 10 references

Raw JSON (NVD)

Show
{
  "id": "CVE-2011-1479",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.7,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-06-21T23:55:02.287",
  "references": [
    {
      "url": "http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d0de4dc584ec6aa3b26fffea320a8457827768fc",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/04/11/1",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=691793",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://github.com/torvalds/linux/commit/d0de4dc584ec6aa3b26fffea320a8457827768fc",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d0de4dc584ec6aa3b26fffea320a8457827768fc",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/04/11/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=691793",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/torvalds/linux/commit/d0de4dc584ec6aa3b26fffea320a8457827768fc",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de doble liberación en el subsistema inotify en versiones del kernel de Linux anteriores a v2.6.39 permite a usuarios locales provocar una denegación de servicio (caída del sistema) a través de vectores relacionados con intentos fallidos de creación de archivos. NOTA: esta vulnerabilidad existe debido a una corrección incorrecta para el CVE-2010-4250."
    }
  ],
  "lastModified": "2026-06-16T23:29:27.847",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57A0A2B0-3B9F-40C2-8C7A-CD9590B51315",
              "versionEndIncluding": "2.6.38.8"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7462DB6D-E0A6-4DBB-8E21-66B875184FFC"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DDCB342-4F5F-4BF1-9624-882BBC57330D"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3AB4113-BF83-4587-8A85-0E4FECEE7D9B"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38:rc3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B57F5AD-A697-4090-89B9-81BC12993A1A"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38:rc4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA141BCB-A705-4DF5-9EED-746B62C86111"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38:rc5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9ECE134-58A3-4B9D-B9B3-F836C0EDD64C"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38:rc6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56186720-6B4C-4D71-85C5-7EAC5C5D84A1"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38:rc7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BBB4630-CBED-43B9-B203-BE65BBF011AA"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38:rc8:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD375A78-63D7-441A-9FB0-7BC878AB4EDD"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5BEFFDD-02BB-4A05-8372-891DBDB9AC5A"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "766E193D-819C-42EA-8411-AE0013AC15FA"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B39B6AF-6A83-48C2-BED2-79228F8513A6"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD8A68D1-DFE9-4ADB-9FB8-4D69AB4CAFF8"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D6EF951-AF15-4C30-A3A5-3392AA61813C"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15154FA0-65DC-4855-AC70-3ACF92313F49"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.38.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4B3A9F4-A61F-4919-A173-3E459F0C5AF8"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}