Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2011-0712

23
FAUCET Score

CVE-2011-0712 describes multiple buffer overflow vulnerabilities within the caiaq Native Instruments USB audio functionality of the Linux kernel, affecting versions prior to 2.6.38-rc4-next-20110215, including Canonical Ubuntu. These flaws, found in the snd_usb_caiaq_audio_init and snd_usb_caiaq_midi_init functions, could be triggered by a long USB device name. The vulnerability carries a CVSS score of 7.2 (High), indicating a local attack vector with low complexity, potentially leading to a denial of service or arbitrary code execution. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 2.6.38CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
2.6.38CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:2.6.38:-:*:*:*:*:*:*
2.6.38CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:2.6.38:rc1:*:*:*:*:*:*
2.6.38CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:2.6.38:rc2:*:*:*:*:*:*
2.6.38CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:2.6.38:rc3:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.2HIGH

AV:L/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Exploitability Score
3.9
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.43%
Probability of exploitation in next 30 days
EPSS Percentile
35.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0043 is in the 52nd percentile among its peer group of 3,237 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

redhatpatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: kernel-0:2.6.32-71.29.1.el6
View patch

Vendor Advisories (1)

redhatCVE-2011-0712Low

kernel: ALSA: caiaq - Fix possible string-buffer overflow

Feb 14, 2011

References

git.kernel.org
bugzilla.redhat.com / show_bug.cgi
Issue TrackingPatchThird Party Advisory
exchange.xforce.ibmcloud.com / vulnerabilities/65461
Third Party AdvisoryVDB Entry
kernel.org / pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110215.bz2
Broken Link
openwall.com / lists/oss-security/2011/02/16/11
Mailing ListPatchThird Party Advisory
openwall.com / lists/oss-security/2011/02/16/12
Mailing ListPatchThird Party Advisory
openwall.com / lists/oss-security/2011/02/16/5
Mailing ListPatchThird Party Advisory
securityfocus.com / bid/46419
Third Party AdvisoryVDB Entry
ubuntu.com / usn/USN-1146-1
Third Party Advisory