CVE-2011-2022: The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 do...

Security readout for executives and security teams

CVE-2011-2022 is a Linux kernel flaw where a local user could abuse an AGP graphics ioctl to crash the system or gain higher privileges. The issue affects kernels before 2.6.38.5 according to the CVE description. It matters most on legacy systems that still allow untrusted local users or workloads. Exposure is likely limited to old Linux systems running kernels before 2.6.38.5 or vendor builds without the backported fix, especially where local users, shared hosting, desktop sessions, or multi-user workloads can reach AGP ioctl paths. Treat this as a high-priority legacy Linux hygiene issue, not an internet-facing emergency. Patch or retire affected systems, focusing first on shared servers and any environment where users or workloads are not fully trusted. Mitigation focus: Upgrade affected Linux kernels or apply vendor kernel updates containing the fix.; Review RHSA-2011:0927 if running affected Red Hat-derived systems.; Prioritize systems with untrusted local users or shared workloads..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.