CVE-2011-2695: Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to ca...

Security readout for executives and security teams

This is an old local denial-of-service issue in Linux ext4. A user with local filesystem access could trigger an edge case while writing to a very large sparse file and crash the system. The provided sources do not describe remote compromise or data theft. Exposure is most likely on legacy Linux systems running kernels before 3.0-rc5 with ext4 filesystems and local users or workloads able to write files. Modern supported distributions are likely patched, but vendor backport status must be verified. Treat this as legacy availability risk. It matters most where old Linux kernels still support local users or untrusted workloads. Patch through normal kernel maintenance unless exposed shared systems depend on vulnerable kernels. Mitigation focus: Update affected Linux kernels to a vendor-supported release containing the ext4 fix.; Check distribution advisories for patched kernel packages and backport status.; Restrict untrusted local shell or write access on legacy ext4 systems..

Prepared

Jun 27, 2026, 18:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.