CVE-2011-2497

CVE-2011-2497 describes an integer underflow vulnerability in the Linux kernel's L2CAP implementation (l2cap_config_req function). This flaw allows remote attackers to trigger a heap memory corruption and denial of service, or potentially other impacts, by sending a crafted L2CAP configuration request with a small command-size value. The vulnerability has a high severity CVSS score of 8.3, indicating a network-adjacent attack vector with low complexity and high impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the potential for significant impact warrants attention.