CVE-2011-1170: net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place...

Security readout for executives and security teams

This is an old Linux kernel information disclosure bug. A local user with CAP_NET_ADMIN could make netfilter ARP table handling expose kernel memory through a modprobe argument. The source bundle does not show remote attack, privilege escalation, or active exploitation. Exposure is most likely on legacy Linux systems or vendor appliances running kernels before 2.6.39, especially where untrusted local users or workloads have CAP_NET_ADMIN. The bundle lists generic affected data only, so exact downstream package versions must be confirmed with vendor advisories. Treat this as a legacy exposure cleanup item, not an emergency from the supplied evidence. Prioritize internet-critical, multi-user, container-hosting, or appliance systems where older kernels remain in service and privileged local access may be delegated. Mitigation focus: Upgrade affected kernels or apply vendor backported fixes for CVE-2011-1170.; Check Linux distribution and appliance advisories for fixed package versions.; Restrict CAP_NET_ADMIN to trusted administrators and necessary services only..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.