CVE-2011-1017: Heap-based buffer overflow in the ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2...

Security readout for executives and security teams

This is an old Linux kernel flaw in how LDM partition tables were parsed. A local user with access to a crafted disk or disk image might trigger kernel memory corruption, potentially leading to privilege gain or sensitive information exposure. It is not listed as KEV, and the provided sources do not show active exploitation. Exposure is most likely on legacy Linux systems, appliances, or recovery environments running kernels at or before 2.6.37.2 that parse LDM partition tables from local disks, removable media, or disk images. Modern supported distributions are less likely exposed if fully patched. Prioritize remediation for legacy Linux systems that accept untrusted storage or disk images, especially shared workstations, forensic systems, virtualization hosts, and appliances. For fully supported, patched fleets, this is mainly an inventory confirmation item. Mitigation focus: Apply vendor kernel updates, including Ubuntu USN-1146-1 where applicable.; Check non-Ubuntu distribution advisories for the relevant fixed kernel package.; Limit local handling of untrusted removable disks and disk images until patched..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.