CVE-2011-1020: Linux Kernel

Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days.

The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls.

Affected products

• Linux Linux Kernel: before 2.6.37 (fixed in 2.6.37)

Published 2011-02-28. Last modified 2026-06-16.