CVE-2011-4097

Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service (memory consumption or process termination) by using a certain large amount of memory.

• CWE-190

• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/11/01/2Exploit, Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=750399Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/56c6a8a4aadca809e04276eabe5552935c51387fExploit, Patch, Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/11/01/2Exploit, Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=750399Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/56c6a8a4aadca809e04276eabe5552935c51387fExploit, Patch, Third Party Advisory

Published

May 17, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4091The libobby server in inc/server.hpp in libnet6 (aka net6) b…
• CVE-2011-4092obby (aka libobby) does not verify SSL server certificates, …
• CVE-2011-4093Integer overflow in inc/server.hpp in libnet6 (aka net6) bef…
• CVE-2011-4094Jara 1.6 has a SQL injection vulnerability.9.8
• CVE-2011-4095Jara 1.6 has an XSS vulnerability6.1
• CVE-2011-4096The idnsGrokReply function in Squid before 3.1.16 does not p…
• CVE-2011-4098The fallocate implementation in the GFS2 filesystem in the L…
• CVE-2011-4099The capsh program in libcap before 2.22 does not change the …
• CVE-2011-4100The csnStreamDissector function in epan/dissectors/packet-cs…
• CVE-2011-4101The dissect_infiniband_common function in epan/dissectors/pa…
• CVE-2011-4102Heap-based buffer overflow in the erf_read_header function i…
• CVE-2011-4103emitters.py in Django Piston before 0.2.3 and 0.2.x before 0…