CVE-2011-1479
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local...
4.7 MediumPublic exploit
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.
Exploit likelihood
0.80%Down 1.0 points since Feb 4, 2022
What each source reports
NVD Score used
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.
- Record
CVE-2011-1479- CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.
- Record
CVE-2011-1479- Updated
- 2026-11-02
EUVDEUVD-2011-1483 No score
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.
- Record
EUVD-2011-1483- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-54wm-cw9m-9pfm No score
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local...
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.
- Record
GHSA-54wm-cw9m-9pfm- Updated
- 2026-11-02
OSVBELL-CVE-2011-1479
CVE-2011-1479 does not affect BellSoft software
- Record
BELL-CVE-2011-1479- CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-rtRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-debugRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-debuginfo-common-x86_64Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-docRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-firmwareRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-traceRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 33 CVEs |
before 0:2.6.33.9-rt31.75.el6rt | 0:2.6.33.9-rt31.75.el6rt |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6.x - 'inotify_init1()' Double-Free Local Denial of Service | 2011-04-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1479 is a medium vulnerability (CVSS 4.7) in Linux Kernel, published June 21, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.80%, the 56th percentile. No source names a fixed version.
References
openwall.com/lists/oss-security/2011/04/11/1
github.com/torvalds/linux/commit/d0de4dc584ec6aa3b26fffea320a8457827768fc
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d0de4dc584ec6aa3b26fffea320a8457827768fc
bugzilla.redhat.com/show_bug.cgi?id=691793
ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
nvd.nist.gov/vuln/detail/CVE-2011-1479
Show 137 moreShow less
docs.bell-sw.com/security/cves/CVE-2011-1479
access.redhat.com/errata/RHSA-2011:1253
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2.0/html/Technical_Notes/index.html
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1253.json
cve.org/CVERecord?id=CVE-2010-4243