CVE-2011-1180: Linux Kernel

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging connectivity to an IrDA infrared network and sending a large integer value for a (1) name length or (2) attribute length.

Affected products

• Linux Linux Kernel: before 2.6.39 (fixed in 2.6.39)

Published 2013-06-08. Last modified 2026-06-16.