CVE-2011-2498

MediumCVSS 5.5/10Last modified Jun 16, 2026

Description

The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service (memory consumption) by triggering creation of PTE pages.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-772

Affected software

Vendor	Product	Versions
n/a	Linux kernel	v2.3.36 before v2.6.39

References

http://marc.info/?l=oss-security&m=130923704824984&w=2Third Party Advisory
https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-2498.htmlThird Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-2498Third Party Advisory
https://usn.ubuntu.com/1167-1/Third Party Advisory
https://www.rapid7.com/db/vulnerabilities/ubuntu-USN-1383-1Third Party Advisory
http://marc.info/?l=oss-security&m=130923704824984&w=2Third Party Advisory
https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-2498.htmlThird Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-2498Third Party Advisory
https://usn.ubuntu.com/1167-1/Third Party Advisory
https://www.rapid7.com/db/vulnerabilities/ubuntu-USN-1383-1Third Party Advisory

Timeline

Published: Feb 20, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-24996.1Mambo CMS through 4.6.5 has multiple XSS.CVE-2011-25007.5The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS CVE-2011-25016.5The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 CVE-2011-25024.4runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a mo CVE-2011-25033.7The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not prope CVE-2011-25046.9Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Tro CVE-2011-25056.4libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 as CVE-2011-25067.5setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of co CVE-2011-25076.5libraries/server_synchronize.lib.php in the Synchronize implementation in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not p CVE-2011-25086.0Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certai CVE-2011-25094.3Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML vi CVE-2011-25104.3Cross-site scripting (XSS) vulnerability in the RSS embedding feature in DokuWiki before 2011-05-25a Rincewind allows remote attackers to in