CVE-2011-4097: Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit pl...

Security readout for executives and security teams

This is an old Linux kernel flaw where a local user could trigger unstable out-of-memory decisions on 64-bit systems, causing memory exhaustion or unintended process termination. It is not described as remote code execution, and the source bundle does not show active exploitation. Exposure is most plausible on legacy 64-bit Linux systems running kernels before 3.1.8, especially shared systems where local users or workloads are not fully trusted. Modern supported Linux distributions are unlikely to remain exposed unless they carry an old or unpatched custom kernel. Treat this as legacy hygiene unless vulnerable shared Linux systems still exist. Prioritize remediation where untrusted users or workloads can run locally, because the realistic impact is service disruption rather than data theft or remote compromise. Mitigation focus: Upgrade affected 64-bit Linux kernels to 3.1.8 or a vendor-supported fixed backport.; Check distribution advisories before applying upstream kernel changes directly.; Prioritize shared, multi-user, hosting, CI, and legacy appliance systems..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.