CVE-2011-2213

CVE-2011-2213 describes a denial-of-service vulnerability in the Linux kernel, specifically affecting versions prior to 2.6.39.3, including Red Hat distributions. The flaw resides in the inet_diag_bc_audit function, which improperly audits INET_DIAG bytecode. This allows a local attacker to trigger a kernel infinite loop by sending crafted netlink messages containing specific INET_DIAG_REQ_BYTECODE instructions. The vulnerability has a CVSS score of 4.9, indicating a medium severity. It requires local access (AV:L) and low attack complexity (AC:L), with no authentication needed (Au:N), leading to a complete denial of service (A:C) without impacting confidentiality or integrity. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.