CVE-2011-4080

The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.

• CWE-264

• http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39Broken Link
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bfdc0b497faa82a0ba2f9dddcf109231dd519fcc
• http://www.openwall.com/lists/oss-security/2011/10/26/10Mailing List, Third Party Advisory
• https://github.com/torvalds/linux/commit/bfdc0b497faa82a0ba2f9dddcf109231dd519fccPatch, Third Party Advisory
• http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39Broken Link
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bfdc0b497faa82a0ba2f9dddcf109231dd519fcc
• http://www.openwall.com/lists/oss-security/2011/10/26/10Mailing List, Third Party Advisory
• https://github.com/torvalds/linux/commit/bfdc0b497faa82a0ba2f9dddcf109231dd519fccPatch, Third Party Advisory

Published

May 24, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4074Cross-site scripting (XSS) vulnerability in cmd.php in phpLD…
• CVE-2011-4075The masort function in lib/functions.php in phpLDAPadmin 1.2…
• CVE-2011-4076OpenStack Nova before 2012.1 allows someone with access to a…5.9
• CVE-2011-4077Buffer overflow in the xfs_readlink function in fs/xfs/xfs_v…
• CVE-2011-4078include/iniset.php in Roundcube Webmail 0.5.4 and earlier, w…
• CVE-2011-4079Off-by-one error in the UTF8StringNormalize function in Open…
• CVE-2011-4081crypto/ghash-generic.c in the Linux kernel before 3.1 allows…5.5
• CVE-2011-4082A local file inclusion flaw was found in the way the phpLDAP…7.5
• CVE-2011-4083The sosreport utility in the Red Hat sos package before 1.7-…
• CVE-2011-4084Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2011-4085The servlets invoked by httpha-invoker in JBoss Enterprise A…
• CVE-2011-4086The journal_unmap_buffer function in fs/jbd2/transaction.c i…