CVE-2011-2494

CVE-2011-2494 describes an information disclosure vulnerability in the Linux kernel (versions prior to 3.1) within the kernel/taskstats.c component. This flaw allows local attackers to retrieve sensitive I/O statistics, potentially revealing information like the length of another user's password. With a CVSS score of 2.1, it is considered low severity, requiring local access with low attack complexity, and resulting in partial confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.