UBUNTU-CVE-2011-2496
Advisory lineage Upstream: 1 Downstream: 0
Upstream
Published: 06 Oct 2011, 00:00
Last modified:04 Feb 2026, 02:25
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
06 Oct 2011, 00:00
Published
Vulnerability first disclosed
04 Feb 2026, 02:25
Last Modified
Vulnerability information updated
Description
Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (BUG_ON and system crash) via a crafted mremap system call that expands a memory mapping.
Affected Systems
- ubuntu•linux
< 3.11.0-12.19
- ubuntu•linux-flo
< 3.4.0-1.3
- ubuntu•linux-goldfish
< 3.4.0-1.9
- ubuntu•linux-grouper
< 3.1.10-8.28
- ubuntu•linux-lts-utopic
< 3.16.0-25.33~14.04.2
- ubuntu•linux-lts-vivid
< 3.19.0-18.18~14.04.1
- ubuntu•linux-maguro
< 3.0.0-3.18
- ubuntu•linux-mako
< 3.4.0-3.21
- ubuntu•linux-manta
< 3.4.0-4.19
References (14)
- https://ubuntu.com/security/CVE-2011-2496
- http://seclists.org/oss-sec/2011/q2/689
- https://ubuntu.com/security/notices/USN-1167-1
- https://ubuntu.com/security/notices/USN-1241-1
- https://ubuntu.com/security/notices/USN-1256-1
- https://ubuntu.com/security/notices/USN-1268-1
- https://ubuntu.com/security/notices/USN-1269-1
- https://ubuntu.com/security/notices/USN-1272-1
- https://ubuntu.com/security/notices/USN-1274-1
- https://ubuntu.com/security/notices/USN-1278-1
- https://ubuntu.com/security/notices/USN-1280-1
- https://ubuntu.com/security/notices/USN-1281-1
- https://ubuntu.com/security/notices/USN-1286-1
- https://www.cve.org/CVERecord?id=CVE-2011-2496