The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-PAEUpgrade kernelUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-debug | Dec 1, 2016 | May 9, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 9, 2011 |
| Suse | — | Upgrade kernel-vanilla-develUpgrade kernel-debug-baseUpgrade kernel-vmipaeUpgrade kernel-vmi-develUpgrade kernel-desktop-baseUpgrade kernel-vanillaUpgrade kernel-default-develUpgrade kernel-ec2-baseUpgrade kernel-smpUpgrade preload-kmp-defaultUpgrade kernel-vmi-baseUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-traceUpgrade kernel-vmiUpgrade kernel-vanilla-baseUpgrade kernel-defaultUpgrade kernel-paeUpgrade kernel-debugUpgrade kernel-trace-develUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade preload-kmp-desktopUpgrade kernel-kdumppaeUpgrade kernel-bigsmpUpgrade kernel-desktopUpgrade kernel-xenpaeUpgrade kernel-kdumpUpgrade kernel-desktop-develUpgrade kernel-xen-develUpgrade kernel-pae-develUpgrade kernel-source-vanillaUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-ec2-extraUpgrade kernel-default-base | Feb 17, 2015 | May 9, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-33-lpiaUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-33-preemptUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-33-powerpc64-smpUpgrade linux-image-2.6.32-33-virtualUpgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.32-33-sparc64-smp | Nov 8, 2024 | May 9, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | May 9, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub