CVE-2011-2189: net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of cre...

Security readout for executives and security teams

This is an old Linux kernel denial-of-service issue. Systems running Linux 2.6.32 or earlier could consume excessive memory when network namespaces are created and cleaned up rapidly, especially through a daemon that creates one namespace per connection, as shown with vsftpd. Exposure is most likely on legacy Linux 2.6.32 or earlier systems, or vendor kernels carrying the vulnerable behavior, running network-facing daemons that create network namespaces per connection. Treat as a legacy exposure cleanup item with business impact through service outage, not data theft. Prioritize internet-facing or high-connection services on old kernels. Mitigation focus: Apply vendor kernel updates addressing CVE-2011-2189.; Migrate unsupported Linux 2.6.32-era systems to supported kernels.; Review daemons that create network namespaces per connection..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.