CVE-2011-3637 — kernel: proc: fix oops on invalid /proc/<pid>/maps access

Back Back to CVE browser

MEDIUM

kernel: proc: fix oops on invalid /proc/<pid>/maps access

Published May 17, 2012

5.5

MEDIUM

CVSS 3.1

EPSS 0.36%

Description

The m_stop function in fs/proc/task_mmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (OOPS) via vectors that trigger an m_start error.

Affected products

Red Hat Enterprise Linux 5

kernel-0:2.6.18-274.17.1.el5

Fixed · RHSA-2012:0007
Red Hat Enterprise MRG 2

kernel-rt-0:2.6.33.9-rt31.79.el6rt

Fixed · RHSA-2012:0010
Red Hat Enterprise Linux 4

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	kernel-0:2.6.18-274.17.1.el5	Fixed	RHSA-2012:0007
Red Hat Enterprise MRG 2	kernel-rt-0:2.6.33.9-rt31.79.el6rt	Fixed	RHSA-2012:0010
Red Hat Enterprise Linux 4	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Affected	n/a

Remediation

Red Hat statement

This issue did not affect the version of the Linux kernel as shipped with Red Hat Enterprise Linux 4, and 6 as it did not backport the upstream commit ec6fd8a4 that introduced this issue. This has been addressed in Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2012-0007.html and https://rhn.redhat.com/errata/RHSA-2012-0010.html.

Metrics

0.36% 0.00364

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00364

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.36% (0.00364)	27.83th	v5 (v2026.06.15)
Jun 15, 2026	0.37% (0.00367)	28.26th	v5 (v2026.06.15)
Mar 17, 2025	0.05% (0.00047)	11.71th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	0.95% (0.00950)	32.28th	v2 (v2022.01.01)
Feb 13, 2023	0.95% (0.00950)	31.86th	v2 (v2022.01.01)
Feb 3, 2023	1.10% (0.01104)	53.31th	v2 (v2022.01.01)
Sep 10, 2022	0.95% (0.00950)	30.63th	v2 (v2022.01.01)
Apr 1, 2022	0.95% (0.00950)	28.61th	v2 (v2022.01.01)
Feb 4, 2022	0.95% (0.00950)	13.46th	v2 (v2022.01.01)

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (8)

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
x_refsource_CONFIRMBroken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=76597cd31470fa130784c78fadb4dab2e624a723
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2012/02/06/1
mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
https://access.redhat.com/security/cve/CVE-2011-3637
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=747848
x_refsource_CONFIRMIssue TrackingThird Party Advisory
https://github.com/torvalds/linux/commit/76597cd31470fa130784c78fadb4dab2e624a723
x_refsource_CONFIRMPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-3637
https://www.cve.org/CVERecord?id=CVE-2011-3637

Link	Providers	Tags
http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39		x_refsource_CONFIRMBroken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=76597cd31470fa130784c78fadb4dab2e624a723		x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2012/02/06/1		mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
https://access.redhat.com/security/cve/CVE-2011-3637		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=747848		x_refsource_CONFIRMIssue TrackingThird Party Advisory
https://github.com/torvalds/linux/commit/76597cd31470fa130784c78fadb4dab2e624a723		x_refsource_CONFIRMPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-3637
https://www.cve.org/CVERecord?id=CVE-2011-3637