Every CVESearch/Get API key

CVE-2011-2521

The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events...

4.9 Medium

CVE-2011-2521 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published May 24, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.

What does this mean?
Severity
4.9 MediumCVSS 2.0, NVD
Exploit chance
0.39%EPSS, 33rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program.

Exploit likelihood

0.39%Down 0.6 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-bootwrapper
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-debug
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
Show 9 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-doc
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-firmware
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-headers
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-kdump
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-kdump-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
kernel-kdump-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
perf
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6
perf-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 11 CVEs
before 0:2.6.32-131.17.1.el6
0:2.6.32-131.17.1.el6

What each source reports

NVD Score used4.9

The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program.

Record
CVE-2011-2521
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program.

Record
CVE-2011-2521
Updated
2026-11-02
EUVDEUVD-2011-2506No score

The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program.

Record
EUVD-2011-2506
Updated
2026-11-03
GitHub AdvisoriesGHSA-xr3h-hfcp-qxhfNo score

The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events...

The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program.

Record
GHSA-xr3h-hfcp-qxhf
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 51 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open