CVE-2011-1747: The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not properly restrict memory allocation by...

Security readout for executives and security teams

CVE-2011-1747 is a local denial-of-service flaw in the Linux kernel AGP subsystem. A user already able to run code on an affected system could force excessive memory allocation and make the host unstable or unavailable. It is not described as remote code execution, and the provided sources do not show active exploitation. Exposure is most relevant to legacy Linux systems running kernel 2.6.38.5 or earlier with AGP support accessible to local users. Modern systems are unlikely to be affected unless they run old or vendor-frozen kernels without backports. Treat this as a legacy local availability risk. It should not usually outrank remotely exploitable or actively exploited issues, but exposed multi-user Linux hosts and unsupported kernels should be remediated promptly. Mitigation focus: Identify systems running Linux kernel 2.6.38.5 or earlier.; Apply vendor kernel updates containing the AGP allocation fix.; Confirm distribution backports rather than relying only on upstream version numbers..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.