CVE-2011-2918

The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF_COUNT_SW_CPU_CLOCK events, which allows local users to cause a denial of service (system hang) via a crafted application.

• CWE-400

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8b0ca17b80e92faab46ee7179ba9e99ccb61233
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/08/16/1Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=730706Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/a8b0ca17b80e92faab46ee7179ba9e99ccb61233Patch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8b0ca17b80e92faab46ee7179ba9e99ccb61233
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/08/16/1Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=730706Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/a8b0ca17b80e92faab46ee7179ba9e99ccb61233Patch, Third Party Advisory

Published

May 24, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2912Stack-based buffer overflow in the CSoundFile::ReadS3M funct…
• CVE-2011-2913Off-by-one error in the CSoundFile::ReadAMS function in src/…
• CVE-2011-2914Off-by-one error in the CSoundFile::ReadDSM function in src/…
• CVE-2011-2915Off-by-one error in the CSoundFile::ReadAMS2 function in src…
• CVE-2011-2916qtnx 0.9 stores non-custom SSH keys in a world-readable conf…5.5
• CVE-2011-2917SQL injection vulnerability in administrator/index2.php in M…
• CVE-2011-2919Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, a…
• CVE-2011-2920A flaw was found in Spacewalk and Red Hat Network Satellite.…5.5
• CVE-2011-2921ktsuss versions 1.4 and prior has the uid set to root and do…9.8
• CVE-2011-2922ktsuss versions 1.4 and prior spawns the GTK interface to ru…7.8
• CVE-2011-2923foomatic-rip filter, all versions, used insecurely creates t…5.5
• CVE-2011-2924foomatic-rip filter v4.0.12 and prior used insecurely create…5.5