CVE-2011-1479

Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.

Affected Software

Name	Vendor	Start Version	End Version
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38.3	2.6.38.3
Linux_kernel	Linux	*	2.6.38.8
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38.6	2.6.38.6
Linux_kernel	Linux	2.6.38.1	2.6.38.1
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38.5	2.6.38.5
Linux_kernel	Linux	2.6.38.2	2.6.38.2
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38.4	2.6.38.4
Linux_kernel	Linux	2.6.38.7	2.6.38.7
Red Hat Enterprise MRG 2	RedHat	kernel-rt-0:2.6.33.9-rt31.75.el6rt	*
Linux	Ubuntu	maverick	*
Linux	Ubuntu	natty	*
Linux	Ubuntu	upstream	*
Linux-ec2	Ubuntu	maverick	*
Linux-ec2	Ubuntu	upstream	*
Linux-fsl-imx51	Ubuntu	upstream	*
Linux-lts-backport-maverick	Ubuntu	lucid	*
Linux-lts-backport-maverick	Ubuntu	upstream	*
Linux-lts-backport-natty	Ubuntu	lucid	*
Linux-lts-backport-natty	Ubuntu	upstream	*
Linux-lts-backport-oneiric	Ubuntu	upstream	*
Linux-mvl-dove	Ubuntu	upstream	*
Linux-ti-omap4	Ubuntu	natty	*
Linux-ti-omap4	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2011-1479
CWE	https://cwe.mitre.org/data/definitions/399.html

Affected Software

References