CVE-2011-2525: The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill...

Security readout for executives and security teams

CVE-2011-2525 is an old Linux kernel local denial-of-service issue. A local user could trigger a kernel crash path in traffic-control queueing code, potentially causing system instability or outage. The source bundle does not show remote exploitation or active exploitation evidence. Exposure is most likely limited to legacy Linux systems or vendor kernels that lack the qdisc_notify fix. The attack requires local user access. Current mainstream systems are unlikely to run an affected upstream kernel, but long-lived appliances, embedded systems, or unsupported servers need confirmation. Treat this as a legacy exposure cleanup item unless affected systems still host untrusted local users or critical workloads. Prioritize confirmation on old Linux estates, embedded devices, and unsupported systems because successful abuse can crash the host. Mitigation focus: Upgrade affected Linux kernels using vendor-supported updates.; Check Red Hat advisories RHSA-2011:1065 and RHSA-2011:1163 where applicable.; Verify vendor kernels include the upstream qdisc_notify fix..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.