VULNERABILITY INTELLIGENCE

CVE-2011-2898

CVSS score5.5 MEDIUM

EPSS probability0.45%

CISA KEVNot currently listed

Published2012-05-24

Last modified2026-06-16

Description

net/packet/af_packet.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application.