CVE-2011-1171: net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place...

Security readout for executives and security teams

This is an old Linux kernel information leak in IPv4 netfilter. A local user with CAP_NET_ADMIN could trigger unterminated string handling and expose potentially sensitive kernel memory through a modprobe argument. The supplied sources do not show remote exploitation or active exploitation. Exposure is most likely on legacy Linux systems running kernels before 2.6.39 or vendor kernels missing the backported fix, especially where untrusted users or containers can obtain CAP_NET_ADMIN. Treat this as a legacy hygiene issue unless affected systems still run old kernels with privileged local users. It can leak sensitive kernel memory, but the privilege requirement and age reduce urgency compared with remotely exploitable kernel flaws. Mitigation focus: Upgrade to Linux kernel 2.6.39 or a vendor-fixed backport.; Apply relevant vendor advisories, including Red Hat RHSA-2011:0833 where applicable.; Restrict CAP_NET_ADMIN to trusted users, services, and containers only..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.