CVE-2011-2471

CVE-2011-2471 describes a local privilege escalation vulnerability in OProfile versions 0.9.6 and earlier, specifically within the utils/opcontrol component. This flaw allows local users to gain root privileges by injecting shell metacharacters into the --vmlinux, --session-dir, or --xen arguments. With a CVSS score of 7.2, this vulnerability is considered highly severe, requiring local access but having low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.