CVE-2011-3151: Canonical Selinux

Medium severity, CVSS 5.9. EPSS: 0.6% chance of exploitation in the next 30 days.

The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.

Affected products

• Canonical Selinux: before 1\:0.10 (fixed in 1\:0.10)

Published 2019-04-22. Last modified 2026-06-16.