CVE-2011-2521
The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events...
CVE-2011-2521 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published May 24, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in kernel 0:2.6.32-131.17.1.el6.
The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program.
Exploit likelihood
What each source reports
NVD Score used
4.9
The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program.
- Record
CVE-2011-2521- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program.
- Record
CVE-2011-2521- Updated
- 2026-11-02
EUVDEUVD-2011-2506 No score
The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program.
- Record
EUVD-2011-2506- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xr3h-hfcp-qxhf No score
The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events...
The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program.
- Record
GHSA-xr3h-hfcp-qxhf- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/torvalds/linux/commit/fc66c5210ec2539e800e87d7b3a985323c7be96e
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fc66c5210ec2539e800e87d7b3a985323c7be96e
ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
openwall.com/lists/oss-security/2011/07/06/4
bugzilla.redhat.com/show_bug.cgi?id=719228
nvd.nist.gov/vuln/detail/CVE-2011-2521
Show 51 moreShow less
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=fc66c5210ec2539e800e87d7b3a985323c7be96e
github.com/advisories/GHSA-xr3h-hfcp-qxhf
access.redhat.com/errata/RHSA-2011:1350
access.redhat.com/security/updates/classification
rhn.redhat.com/errata/RHSA-2011-1241.html
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/kernel.html
bugzilla.redhat.com/show_bug.cgi?id=684671
bugzilla.redhat.com/show_bug.cgi?id=698996
bugzilla.redhat.com/show_bug.cgi?id=698998
bugzilla.redhat.com/show_bug.cgi?id=713463
bugzilla.redhat.com/show_bug.cgi?id=715436
bugzilla.redhat.com/show_bug.cgi?id=716538
bugzilla.redhat.com/show_bug.cgi?id=726552
bugzilla.redhat.com/show_bug.cgi?id=728023
bugzilla.redhat.com/show_bug.cgi?id=730706
bugzilla.redhat.com/show_bug.cgi?id=731172
bugzilla.redhat.com/show_bug.cgi?id=732379
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1350.json
access.redhat.com/security/cve/CVE-2011-1160
cve.org/CVERecord?id=CVE-2011-1160
nvd.nist.gov/vuln/detail/CVE-2011-1160
access.redhat.com/security/cve/CVE-2011-1745
cve.org/CVERecord?id=CVE-2011-1745
nvd.nist.gov/vuln/detail/CVE-2011-1745
access.redhat.com/security/cve/CVE-2011-1746
cve.org/CVERecord?id=CVE-2011-1746
nvd.nist.gov/vuln/detail/CVE-2011-1746
access.redhat.com/security/cve/CVE-2011-1833
cve.org/CVERecord?id=CVE-2011-1833
nvd.nist.gov/vuln/detail/CVE-2011-1833
access.redhat.com/security/cve/CVE-2011-2022
cve.org/CVERecord?id=CVE-2011-2022
nvd.nist.gov/vuln/detail/CVE-2011-2022
access.redhat.com/security/cve/CVE-2011-2484
cve.org/CVERecord?id=CVE-2011-2484
nvd.nist.gov/vuln/detail/CVE-2011-2484
access.redhat.com/security/cve/CVE-2011-2496
cve.org/CVERecord?id=CVE-2011-2496
nvd.nist.gov/vuln/detail/CVE-2011-2496
access.redhat.com/security/cve/CVE-2011-2521
cve.org/CVERecord?id=CVE-2011-2521
access.redhat.com/security/cve/CVE-2011-2723
cve.org/CVERecord?id=CVE-2011-2723
nvd.nist.gov/vuln/detail/CVE-2011-2723
git.kernel.org/linus/17dd759c67f21e34f2156abcf415e1f60605a188
access.redhat.com/security/cve/CVE-2011-2898
cve.org/CVERecord?id=CVE-2011-2898
nvd.nist.gov/vuln/detail/CVE-2011-2898
access.redhat.com/security/cve/CVE-2011-2918
cve.org/CVERecord?id=CVE-2011-2918
nvd.nist.gov/vuln/detail/CVE-2011-2918