CVE-2011-2479: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The Linux kernel before 2.6.39 does not properly create transparent huge pages in response to a MAP_PRIVATE mmap system call on /dev/zero, which allows local users to cause a denial of service (system crash) via a crafted application.

Affected products

• Linux Linux Kernel: before 2.6.39 (fixed in 2.6.39)

Published 2013-03-01. Last modified 2026-06-16.