CVE-2011-1173: The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the x86_64 platf...

Security readout for executives and security teams

CVE-2011-1173 is an old Linux kernel information leak. On x86_64 systems before Linux 2.6.39, Econet/AUN packet handling could expose four bytes of kernel stack memory to a remote reader. The business risk is mainly legacy-system exposure and potential leakage of sensitive kernel data. Exposure is most likely on legacy x86_64 Linux systems running kernels before 2.6.39 with Econet/AUN support present and reachable. Modern supported distributions are unlikely to run this exact upstream version, but vendor backport status must be verified for old appliances, embedded systems, and frozen kernel builds. Treat this as a legacy exposure cleanup item unless affected systems are network-reachable and unpatched. It is not presented as actively exploited, but kernel memory disclosure can support broader attack chains and should not remain unresolved on unsupported systems. Mitigation focus: Upgrade to Linux kernel 2.6.39 or a vendor kernel containing the upstream fix.; Check vendor advisories for backported fixes on supported enterprise kernels.; Identify and retire unsupported legacy kernels where patch status cannot be confirmed..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.