CVE-2011-1479

MediumPublished

Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via...

Published: Jun 21, 2012
Updated: Aug 6, 2024
Assigning CNA: redhat
Evidence observed: Apr 11, 2011

Primary CVSS

4.7/ 10Medium

nvd · CVSS 2.0

AV:L/AC:M/Au:N/C:N/I:N/A:C

EPSS probability estimate

0.8%

Low · next 30 days

Percentile: 54.7%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.

Sources

Linux Kernel 2.6.x - 'inotify_init1()' Double-Free Local Denial of ServiceExploit
anonymous · linux · Apr 11, 2011

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.