CVE-2011-4080
The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not...
CVE-2011-4080 is a medium vulnerability (CVSS 4.0) in Linux Kernel, published May 24, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in kernel 0:2.6.32-220.13.1.el6.
The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.
Exploit likelihood
What each source reports
NVD Score used
The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.
- Record
CVE-2011-4080- CVSS 2.0
- 4.0 Medium
AV:L/AC:H/Au:N/C:C/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.
- Record
CVE-2011-4080- Updated
- 2026-11-02
EUVDEUVD-2011-4031 No score
The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.
- Record
EUVD-2011-4031- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j72v-r3gf-6w7r No score
The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not...
The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.
- Record
GHSA-j72v-r3gf-6w7r- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-develRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-docRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-headersRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
perfRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
python-perfRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernelRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
perfRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
python-perfRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernelRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
python-perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernelRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
perfRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
python-perfRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.13.1.el6 | 0:2.6.32-220.13.1.el6 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/torvalds/linux/commit/bfdc0b497faa82a0ba2f9dddcf109231dd519fcc
openwall.com/lists/oss-security/2011/10/26/10
ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bfdc0b497faa82a0ba2f9dddcf109231dd519fcc
nvd.nist.gov/vuln/detail/CVE-2011-4080
Show 22 moreShow less
access.redhat.com/errata/RHSA-2012:0481
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/kernel.html
bugzilla.redhat.com/show_bug.cgi?id=789373
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0481.json
cve.org/CVERecord?id=CVE-2011-4080