Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via a getxattr system call for the system.nfs4_acl extended attribute of a pathname on an NFSv4 filesystem.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 20, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Nov 19, 2013 |
| Suse | — | Upgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-traceUpgrade kernel-ec2-baseUpgrade xen-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-xen-baseUpgrade hyper-v-kmp-traceUpgrade xen-kmp-paeUpgrade ext4dev-kmp-paeUpgrade btrfs-kmp-defaultUpgrade kernel-ec2Upgrade kernel-paeUpgrade kernel-trace-baseUpgrade btrfs-kmp-paeUpgrade ext4dev-kmp-xenUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade hyper-v-kmp-paeUpgrade kernel-traceUpgrade kernel-default-develUpgrade kernel-sourceUpgrade hyper-v-kmp-defaultUpgrade xen-kmp-traceUpgrade kernel-pae-baseUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-xenUpgrade btrfs-kmp-xenUpgrade kernel-trace-develUpgrade kernel-xen-devel | Nov 17, 2015 | Nov 20, 2013 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Nov 20, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub