The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel | Dec 1, 2016 | May 9, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | May 9, 2011 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-bigsmpUpgrade kernel-xen-baseUpgrade kernel-kdumpUpgrade kernel-ec2-extraUpgrade kernel-desktop-develUpgrade kernel-xen-develUpgrade kernel-desktopUpgrade kernel-kdumppaeUpgrade kernel-debug-develUpgrade kernel-paeUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-trace-baseUpgrade kernel-ec2-develUpgrade kernel-trace-develUpgrade kernel-develUpgrade preload-kmp-desktopUpgrade kernel-ec2Upgrade kernel-symsUpgrade kernel-pae-develUpgrade kernel-vanillaUpgrade kernel-ec2-baseUpgrade kernel-pae-baseUpgrade kernel-vmi-baseUpgrade preload-kmp-defaultUpgrade kernel-traceUpgrade kernel-smpUpgrade kernel-vanilla-develUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-vmi-develUpgrade kernel-default-develUpgrade kernel-vmiUpgrade kernel-desktop-baseUpgrade kernel-debug-baseUpgrade kernel-vmipaeUpgrade kernel-vanilla-base | Feb 17, 2015 | May 9, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-33-sparc64-smpUpgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.32-33-powerpc64-smpUpgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.32-33-virtualUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-33-lpiaUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-33-preempt | Nov 8, 2024 | May 9, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | May 9, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub