CVE-2011-1020

CVE-2011-1020 describes a vulnerability in the Linux kernel, specifically affecting versions 2.6.37 and earlier, where the /proc filesystem fails to restrict access to a process's directory tree after it executes a setuid program. This flaw allows local users to access sensitive information or cause a denial of service. With a CVSS score of 4.6, it is considered a medium-severity local vulnerability, requiring low attack complexity and offering potential for partial confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog or showing active exploitation, an exploit demonstrating privilege escalation on Ubuntu 10.04 (kernel 2.6.32) is available on ExploitDB, though there is minimal community discussion or media coverage.