The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel before 2.6.29 allows local users to cause a denial of service (BUG and system crash) by using the mknod system call with a pathname on an NFSv4 filesystem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-PAE-devel | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 21, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 23, 2008 |
| Suse | — | Upgrade kernel-kdumpUpgrade kernel-vmiUpgrade kernel-iseries64Upgrade kernel-kdumppaeUpgrade kernel-xenUpgrade kernel-ppc64Upgrade kernel-debugUpgrade kernel-vmipaeUpgrade kernel-symsUpgrade kernel-bigsmpUpgrade kernel-xenpaeUpgrade kernel-sourceUpgrade kernel-smpUpgrade kernel-default | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.24-31-powerpcUpgrade linux-image-2.6.24-31-mckinleyUpgrade linux-image-2.6.24-31-openvzUpgrade linux-image-2.6.24-31-sparc64-smpUpgrade linux-image-2.6.24-31-rtUpgrade linux-image-2.6.24-31-lpiaUpgrade linux-image-2.6.24-31-serverUpgrade linux-image-2.6.24-31-lpiacompatUpgrade linux-image-2.6.24-31-hppa32Upgrade linux-image-2.6.24-31-genericUpgrade linux-image-2.6.24-31-386Upgrade linux-image-2.6.24-31-powerpc-smpUpgrade linux-image-2.6.24-31-xenUpgrade linux-image-2.6.24-31-hppa64Upgrade linux-image-2.6.24-31-virtualUpgrade linux-image-2.6.24-31-itaniumUpgrade linux-image-2.6.24-31-sparc64Upgrade linux-image-2.6.24-31-powerpc64-smp | Nov 8, 2024 | Jun 21, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.0 to build number 787047Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Jun 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub