CVE-2011-1160: The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a cer...

Security readout for executives and security teams

CVE-2011-1160 is a Linux kernel TPM driver information leak. On affected pre-2.6.39 kernels, a local user could potentially read leftover kernel memory because a buffer was not initialized. This is not described as remote code execution, and the provided sources do not show active exploitation. Exposure is most likely on legacy Linux systems running kernels before 2.6.39 with the TPM character driver present and accessible to local users. Modern supported distributions are unlikely to run this exact vulnerable upstream kernel, but embedded, appliance, or long-lived systems should be checked. Treat this as a legacy-platform hygiene issue unless affected systems are multi-user, shared, or high-sensitivity. The main business risk is leakage of kernel memory from old Linux hosts, not internet-scale compromise based on the provided evidence. Mitigation focus: Upgrade to Linux kernel 2.6.39 or a vendor-supported kernel containing the fix.; Check distribution advisories for backported fixes in maintained kernel packages.; Inventory legacy systems, appliances, and embedded Linux devices using TPM support..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.