UBUNTU-CVE-2011-4077
Advisory lineage Upstream: 1 Downstream: 0
Upstream
Published: 29 Oct 2011, 00:00
Last modified:04 Feb 2026, 04:21
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
29 Oct 2011, 00:00
Published
Vulnerability first disclosed
04 Feb 2026, 04:21
Last Modified
Vulnerability information updated
Description
Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.
Affected Systems
- ubuntu•linux
< 3.11.0-12.19 | < 4.2.0-16.19
- ubuntu•linux-aws
< 4.4.0-1002.2 | < 4.4.0-1001.10
- ubuntu•linux-flo
< 3.4.0-1.3 | < 3.4.0-5.22
- ubuntu•linux-gke
< 4.4.0-1003.3
- ubuntu•linux-goldfish
< 3.4.0-1.9 | < 3.4.0-4.27
- ubuntu•linux-hwe
< 4.8.0-36.36~16.04.1
- ubuntu•linux-lts-utopic
< 3.16.0-25.33~14.04.2
- ubuntu•linux-lts-vivid
< 3.19.0-18.18~14.04.1
- ubuntu•linux-lts-wily
< 4.2.0-18.22~14.04.1
- ubuntu•linux-lts-xenial
< 4.4.0-13.29~14.04.1
- ubuntu•linux-mako
< 3.4.0-3.21 | < 3.4.0-7.40
- ubuntu•linux-manta
< 3.4.0-4.19
- ubuntu•linux-raspi2
< 4.2.0-1013.19
- ubuntu•linux-snapdragon
< 4.4.0-1012.12
References (18)
- https://ubuntu.com/security/CVE-2011-4077
- https://ubuntu.com/security/notices/USN-1286-1
- https://ubuntu.com/security/notices/USN-1291-1
- https://ubuntu.com/security/notices/USN-1292-1
- https://ubuntu.com/security/notices/USN-1293-1
- https://ubuntu.com/security/notices/USN-1302-1
- https://ubuntu.com/security/notices/USN-1301-1
- https://ubuntu.com/security/notices/USN-1303-1
- https://ubuntu.com/security/notices/USN-1299-1
- https://ubuntu.com/security/notices/USN-1304-1
- https://ubuntu.com/security/notices/USN-1300-1
- https://ubuntu.com/security/notices/USN-1311-1
- https://ubuntu.com/security/notices/USN-1312-1
- https://ubuntu.com/security/notices/USN-1322-1
- https://ubuntu.com/security/notices/USN-1330-1
- https://ubuntu.com/security/notices/USN-1340-1
- https://ubuntu.com/security/notices/USN-1336-1
- https://www.cve.org/CVERecord?id=CVE-2011-4077