CVE-2011-2503: Systemtap

Low severity, CVSS 3.7. EPSS: 0.4% chance of exploitation in the next 30 days.

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.

Affected products

• Systemtap Systemtap: up to and including 1.5; version 0.2.2 only; version 0.3 only; version 0.4 only; version 0.5 only; version 0.5.3 only; …

Published 2012-07-26. Last modified 2026-06-16.