CVE-2011-3209: linux linux_kernel Numeric Errors
Vulnerability summary
CVE-2011-3209 is a medium (CVSS 4.9) Numeric Errors vulnerability in linux linux_kernel. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 41.5% of scored vulnerabilities. 2 public exploits are recorded.
Not severe (CVSS 4.9, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2Timeline
- 03-10-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The div_long_long_rem implementation in include/asm-x86/div64.h in the Linux kernel before 2.6.26 on the x86 platform allows local users to cause a denial of service (Divide Error Fault and panic) via a clock_gettime system call.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.48%
Chance of exploitation in the next 30 days
Percentile
42%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.48% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundLinux
Maturity: poc
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat15 products
- kernel< 0:2.6.18-128.36.1.el5
- kernel-debug< 0:2.6.18-128.36.1.el5
- kernel-debug-debuginfo< 0:2.6.18-128.36.1.el5
- kernel-debug-devel< 0:2.6.18-128.36.1.el5
- kernel-debuginfo< 0:2.6.18-128.36.1.el5
Ubuntu9 products
- linux< 3.11.0-12.19
- linux-flo< 3.4.0-1.3
- linux-goldfish< 3.4.0-1.9
- linux-grouper< 3.1.10-8.28
- linux-lts-utopic< 3.16.0-25.33~14.04.2
Linux1 product
- linux_kernel≤ 2.6.25.20
3 vendors · 25 products
References
15 links- ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26X Refsource CONFIRM
- git.kernel.orgX Refsource CONFIRM
