VULNERABILITY INTELLIGENCE

CVE-2011-4080

CVSS score4 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2012-05-24
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:C/I:N/A:N

Description

The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.

Primary references