VULNERABILITY INTELLIGENCE

CVE-2011-1593

CVSS score4.9 MEDIUM
EPSS probability0.57%
CISA KEVNot currently listed
Published2011-05-03
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C

Description

Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references