CVE-2011-2496 describes an integer overflow vulnerability in the Linux kernel, specifically within the vma_to_resize function in mm/mremap.c, affecting versions prior to 2.6.39. A local attacker can exploit this flaw by crafting an mremap system call to expand a memory mapping, leading to a denial of service through a BUG_ON and system crash. The vulnerability has a CVSS score of 4.9, indicating a low attack complexity and local access requirement, with the sole impact being system availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.6.38.8CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
2.6.38CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.6.38:*:*:*:*:*:*:* | ||
2.6.38CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.6.38:rc1:*:*:*:*:*:* | ||
2.6.38CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.6.38:rc2:*:*:*:*:*:* | ||
2.6.38CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.6.38:rc3:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:N/I:N/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.