VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 13, 2012· Updated Apr 29, 2026

CVE-2011-2494

CVE-2011-2494

Description

kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user's password.

Affected products

34
  • Linux/Kernel34 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 33 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <=3.0.34
    • cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*

Patches

1
1a51410abe7d

Make TASKSTATS require root access

https://github.com/torvalds/linuxLinus TorvaldsSep 20, 2011via nvd-ref
commit
1 file changed · +1 −0
  • kernel/taskstats.c+1 −0 modified
    @@ -655,6 +655,7 @@ static struct genl_ops taskstats_ops = {
 	.cmd		= TASKSTATS_CMD_GET,
 	.doit		= taskstats_user_cmd,
 	.policy		= taskstats_cmd_get_policy,
+	.flags		= GENL_ADMIN_PERM,
 };
 
 static struct genl_ops cgroupstats_ops = {

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

7

News mentions

0

No linked articles in our index yet.