CVE-2011-4077: Linux Kernel

Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.

Affected products

• Linux Linux Kernel: from 2.6.12, before 3.0.11 (fixed in 3.0.11); from 3.1, before 3.1.5 (fixed in 3.1.5)

Published 2012-01-27. Last modified 2026-06-16.