CVE-2011-1172: net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place...

Security readout for executives and security teams

This is an old Linux kernel IPv6 netfilter information leak. A local user with CAP_NET_ADMIN could trigger a crafted request and read unintended kernel memory through a modprobe argument. It is not a remote break-in by itself, and the sources do not show active exploitation. Exposure is most plausible on legacy Linux systems running kernels older than 2.6.39, especially where untrusted local users, containers, or services can obtain CAP_NET_ADMIN. Modern maintained kernels are unlikely to be affected if vendor fixes were applied. Treat this as legacy exposure cleanup, not an emergency unless old kernels with broad local administrative capabilities remain in use. Prioritize internet-facing infrastructure only if it also permits untrusted local execution or risky container privileges. Mitigation focus: Upgrade affected Linux kernels to a vendor-fixed release or later than 2.6.39.; Apply applicable vendor advisories, such as Red Hat RHSA-2011:0833 where relevant.; Restrict CAP_NET_ADMIN to trusted users, services, and containers only..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.