CVE-2011-2208: Integer signedness error in the osf_getdomainname function in arch/alpha/kernel/osf_sys.c in the Linux kern...

Security readout for executives and security teams

This is an old Linux kernel information leak affecting the Alpha platform. A local user could cause the kernel to disclose sensitive memory. Exposure is likely limited to legacy Alpha systems, but affected hosts could leak secrets useful for later compromise. Organizations are likely exposed only if they still run Linux on Alpha architecture with kernels older than 2.6.39.4 or unverified vendor backports. Modern non-Alpha Linux systems are not identified as affected in the provided sources. Treat as targeted legacy risk, not broad emergency. Prioritize remediation if Alpha Linux systems remain in production, especially shared or sensitive environments. Otherwise document non-applicability and monitor vendor records. Mitigation focus: Inventory Linux systems running on Alpha architecture.; Upgrade affected kernels to 2.6.39.4 or a vendor-fixed backport.; Confirm vendor kernel packages include the upstream osf_getdomainname fix..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.