Is CVE-2011-2213 being actively exploited?

CVE-2011-2213 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2011-2213?

CVE-2011-2213 has a CVSS 2.0 base score of 4.9 (MEDIUM).

CVE-2011-2213

MEDIUM · CVSS 4.9EPSS 0.4%EU EUVD

The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.

Key facts

CVSS score: 4.9 (v2.0)
Severity: MEDIUM
CVSS vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness (CWE): CWE-835
EPSS score: 0.4% (33th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2011-2202)
Published: August 29, 2011
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2011-2202 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

linux / linux kernel
redhat / enterprise linux aus
redhat / enterprise linux desktop
redhat / enterprise linux eus
redhat / enterprise linux server
redhat / enterprise linux workstation

Certified products that may be affected

2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Red Hat Enterprise Linux Version 5.6 Virtualization with KVM - Red Hat, Inc. - Common Criteria BSI-DSZ-CC-0724-2012 - archived
Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical

References

http://article.gmane.org/gmane.linux.network/197206(Broken Link)
http://article.gmane.org/gmane.linux.network/197208(Broken Link)
http://article.gmane.org/gmane.linux.network/197386(Broken Link)
http://article.gmane.org/gmane.linux.network/198809(Broken Link)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eeb1497277d6b1a0a34ed36b97e18f2bd7d6de0d
http://marc.info/?l=bugtraq&m=139447903326211&w=2(Third Party Advisory)
http://patchwork.ozlabs.org/patch/100857/(Patch, Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2011-0927.html(Third Party Advisory)
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3(Broken Link)
http://www.openwall.com/lists/oss-security/2011/06/20/1(Mailing List, Third Party Advisory)
http://www.openwall.com/lists/oss-security/2011/06/20/13(Mailing List, Third Party Advisory)
http://www.openwall.com/lists/oss-security/2011/06/20/16(Mailing List, Third Party Advisory)
https://bugzilla.redhat.com/show_bug.cgi?id=714536(Issue Tracking, Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain