VULNERABILITY INTELLIGENCE

CVE-2011-3151

CVSS score5.9 MEDIUM

EPSS probability0.60%

CISA KEVNot currently listed

Published2019-04-22

Last modified2026-06-16

Description

The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.