CVE-2011-2210: Linux Kernel

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

The osf_getsysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform does not properly restrict the data size for GSI_GET_HWRPB operations, which allows local users to obtain sensitive information from kernel memory via a crafted call.

Affected products

• Linux Linux Kernel: up to and including 2.6.39.3; version 2.6.39 only; version 2.6.39.1 only; version 2.6.39.2 only

Published 2012-06-13. Last modified 2026-06-16.