CVE-2011-1159: acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpi...

Security readout for executives and security teams

CVE-2011-1159 is a local denial-of-service flaw in acpid before 2.0.9. A local user could make the acpid daemon hang by connecting to its socket and not reading data. This can disrupt ACPI event handling, such as power-related events, but the provided sources do not indicate remote access, privilege escalation, or active exploitation. Exposure is most likely on older Linux systems running acpid earlier than 2.0.9, especially multi-user hosts where untrusted local users can run applications. The source bundle does not provide complete affected vendor or package matrices beyond the upstream version condition and Fedora advisories. Treat this as a controlled remediation item, not an emergency, unless critical shared Linux systems still run vulnerable acpid versions. The main business risk is local availability disruption, not data theft or remote compromise based on the provided sources. Mitigation focus: Upgrade acpid to 2.0.9 or a vendor-fixed package.; Apply applicable Linux distribution security updates, including Fedora advisories where relevant.; Prioritize shared systems where untrusted local users can execute programs..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.