CVE-2011-2909

CVE-2011-2909 describes an information disclosure vulnerability in the Linux kernel, specifically within the do_devinfo_ioctl function in the comedi_fops.c driver, affecting versions prior to 3.1. A local attacker can exploit this flaw to read sensitive data from kernel memory by manipulating a short string copy operation. With a CVSS score of 4.9, this vulnerability is considered of medium severity, requiring local access and low attack complexity to achieve a complete confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.