CVE-2011-1748: linux linux_kernel NULL Pointer Dereference

Modified

Published 09-05-2011Last modified 06-08-2024

Vulnerability summary

CVE-2011-1748 is a medium (CVSS 4.9) NULL Pointer Dereference vulnerability in linux linux_kernel. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 34.7% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 4.9, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.9/10

010

Medium · v2.0 (NVD)

EPSS score

0.40%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4

DSA-2240-1 DSA-2264-1 RHSA-2011:0836 RHSA-2011:1253

Timeline

09-05-2011
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The raw_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.

CVSS metrics

1 score · 1 source · 1 version

v2.04.9

EPSS trend

Probability

0.40%

Chance of exploitation in the next 30 days

Percentile

35%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.40% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Linux1 product

linux_kernel< 2.6.39 | 2.6.39 | 2.6.39:rc1 | 2.6.39:rc2 | 2.6.39:rc3 | 2.6.39:rc4 | 2.6.39:rc5

1 vendor · 1 product

References

11 links

openwall.com/lists/oss-security/2011/04/21/1Mailing ListX Refsource MLISTThird Party Advisory
openwall.com/lists/oss-security/2011/04/20/7Mailing ListX Refsource MLISTThird Party Advisory
www.securityfocus.com/bid/47835VDB EntryX Refsource BIDThird Party Advisory
openwall.com/lists/oss-security/2011/04/25/4Mailing ListX Refsource MLISTThird Party Advisory
openwall.com/lists/oss-security/2011/04/21/7Mailing ListX Refsource MLISTThird Party Advisory
permalink.gmane.org/gmane.linux.network/192974Mailing ListX Refsource MLISTBroken Link
www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.39-rc6X Refsource CONFIRMBroken Link
git.kernel.orgX Refsource CONFIRM
openwall.com/lists/oss-security/2011/04/22/2Mailing ListX Refsource MLISTThird Party Advisory
openwall.com/lists/oss-security/2011/04/21/2Mailing ListX Refsource MLISTThird Party Advisory

Show all 11 references

bugzilla.redhat.com/show_bug.cgi?id=698057X Refsource CONFIRMIssue TrackingPatchThird Party Advisory