CVE-2011-2905: Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as dis...

Security readout for executives and security teams

CVE-2011-2905 is a local Linux perf issue where the tool could trust configuration from the current directory. A local user could use that behavior to overwrite files. This matters mainly on legacy Linux systems with perf from kernels before 3.1 or vendor packages that did not backport the fix. Exposure is most likely on old Linux hosts running perf from kernel versions before 3.1. Modern distributions are unlikely to be affected unless they carry an unfixed legacy perf package. Local account or local code execution appears required. Treat this as a legacy local-risk cleanup item, not an internet-facing emergency. Prioritize shared servers, build hosts, and multi-user systems where untrusted users may run perf or influence working directories. Mitigation focus: Update Linux kernel/perf to a vendor-fixed build or Linux 3.1 or later lineage.; Confirm distribution backports include the referenced upstream perf_config fix.; Limit local shell access on legacy systems where perf cannot be updated promptly..

Prepared

Jun 15, 2026, 04:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.