CVE-2011-2494

Published: Jun 13, 2012Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user's password.

Affected (34)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.0.34
Linux Linux Kernel	Version 3.0.10
Linux Linux Kernel	Version 3.0.11
Linux Linux Kernel	Version 3.0.12
Linux Linux Kernel	Version 3.0.13
Linux Linux Kernel	Version 3.0.14
Linux Linux Kernel	Version 3.0.15
Linux Linux Kernel	Version 3.0.16
Linux Linux Kernel	Version 3.0.17
Linux Linux Kernel	Version 3.0.18
Linux Linux Kernel	Version 3.0.19
Linux Linux Kernel	Version 3.0.1
Linux Linux Kernel	Version 3.0.20
Linux Linux Kernel	Version 3.0.21
Linux Linux Kernel	Version 3.0.22
Linux Linux Kernel	Version 3.0.23
Linux Linux Kernel	Version 3.0.24
Linux Linux Kernel	Version 3.0.25
Linux Linux Kernel	Version 3.0.26
Linux Linux Kernel	Version 3.0.27
Linux Linux Kernel	Version 3.0.28
Linux Linux Kernel	Version 3.0.29
Linux Linux Kernel	Version 3.0.2
Linux Linux Kernel	Version 3.0.30
Linux Linux Kernel	Version 3.0.31
Linux Linux Kernel	Version 3.0.32
Linux Linux Kernel	Version 3.0.33
Linux Linux Kernel	Version 3.0.3
Linux Linux Kernel	Version 3.0.4
Linux Linux Kernel	Version 3.0.5
Linux Linux Kernel	Version 3.0.6
Linux Linux Kernel	Version 3.0.7
Linux Linux Kernel	Version 3.0.8
Linux Linux Kernel	Version 3.0.9