CVE-2011-4914

CVE-2011-4914 is a vulnerability in the ROSE protocol implementation of the Linux kernel (versions prior to 2.6.39), affecting various Linux distributions including SUSE Linux Enterprise Server. It stems from improper validation of data-length values, allowing remote attackers to potentially read kernel memory or cause a denial of service through out-of-bounds reads via crafted ROSE socket data. With a CVSS score of 6.4 (Medium), it can be exploited remotely with low attack complexity, leading to partial confidentiality and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.