CVE-2011-2210: The osf_getsysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha...

Security readout for executives and security teams

CVE-2011-2210 is a Linux kernel information disclosure issue limited to the Alpha platform. A local user could make a crafted system call and read sensitive kernel memory. This is not described as remotely exploitable, and the provided sources do not show active exploitation. Exposure appears limited to systems running affected Linux kernels on Alpha architecture. Most modern environments are unlikely to use this platform, but legacy estates, embedded deployments, labs, or archival systems should verify kernel lineage and vendor backports. Treat this as a legacy-platform exposure issue. It is not a broad internet-facing emergency, but any affected Alpha host with untrusted local users may leak sensitive kernel memory and should be patched, isolated, or retired. Mitigation focus: Upgrade affected Alpha Linux kernels to 2.6.39.4 or a vendor-fixed build.; Confirm vendor kernels include the upstream fix commit or equivalent backport.; Restrict untrusted local shell access on legacy Alpha systems..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.