CVE-2011-1493: Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2....

Security readout for executives and security teams

CVE-2011-1493 is an old Linux kernel flaw in ROSE networking. A remote attacker could trigger heap memory corruption and crash affected systems, with unspecified further impact possible. The public record does not show active exploitation, and exposure is likely limited to systems using or exposing ROSE networking on kernels before 2.6.39. Most modern systems are unlikely to be exposed. Risk concentrates on legacy Linux kernels before 2.6.39, especially systems with ROSE or related amateur-radio packet networking enabled or reachable. The provided affected-product metadata is incomplete, so distribution-specific exposure must be checked against vendor kernel packages. Treat as a legacy exposure cleanup item unless ROSE networking exists in production or embedded environments. It is not KEV-listed, but remote kernel memory corruption can still affect availability and should be eliminated through supported kernel updates. Mitigation focus: Upgrade to Linux kernel 2.6.39 or a vendor-supported fixed kernel.; Apply distribution advisories that include the upstream ROSE fix.; Review vendor guidance for supported legacy distributions before assuming fixed status..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.