CVE-2011-1476: Integer underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on unspecified...

Security readout for executives and security teams

This is an old Linux kernel flaw in the Open Sound System sequencer interface. On affected non-x86 systems, a local user with access to /dev/sequencer could trigger memory corruption and crash or destabilize the system. The sources do not show remote exploitation or active exploitation. Exposure is most likely on legacy Linux hosts using kernels before 2.6.39, especially non-x86 systems where the OSS sequencer device is present and writable by local users. Modern supported distributions are unlikely to remain exposed if fully patched. Prioritize this where legacy non-x86 Linux systems still support OSS audio devices or permit broad local user access. For current patched enterprise Linux fleets, business urgency is lower, but unsupported systems should be remediated because kernel memory corruption can affect availability. Mitigation focus: Apply vendor kernel updates that include the upstream OSS subsystem fix.; Upgrade legacy kernels to 2.6.39 or later where applicable.; Check distribution advisories for backported fixes on maintained kernel packages..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.