CVE-2011-4077

CVE-2011-4077 describes a buffer overflow vulnerability in the XFS filesystem's xfs_readlink function within the Linux kernel 2.6, specifically when XFS debug mode is disabled. This flaw allows local users to trigger a denial of service through memory corruption and system crashes, with the potential for arbitrary code execution, by crafting an XFS image containing a symbolic link with an excessively long pathname. The vulnerability carries a CVSS score of 6.9, indicating a medium to high severity. It requires local access and moderate attack complexity, but successful exploitation could lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.