CVE-2011-0006: The ima_lsm_rule_init function in security/integrity/ima/ima_policy.c in the Linux kernel before 2.6.37, wh...

Security readout for executives and security teams

CVE-2011-0006 is an old Linux kernel integrity-control bypass. If a system runs a kernel before 2.6.37, has Linux Security Modules disabled, and an administrator adds an IMA rule tied to LSM, local users may bypass that IMA rule in limited circumstances. Likely exposure is limited to legacy Linux systems before kernel 2.6.37 that use IMA policies involving LSM while LSM is disabled. Modern supported distributions are unlikely to be affected unless running very old or custom kernels. Prioritize this for legacy Linux hosts where IMA is part of the integrity or compliance control model. It is not evidenced as remotely exploitable or actively exploited, but it weakens local integrity enforcement on affected configurations. Mitigation focus: Upgrade to Linux kernel 2.6.37 or a vendor kernel containing the referenced upstream fix.; Check distribution advisories for backported fixes in supported enterprise kernels.; Avoid relying on LSM-based IMA rules when LSM is disabled..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.