kernel: nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | |||
| kernel-0:2.6.18-238.9.1.el5 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2011:0429 | 2011-04-12T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| kernel-0:2.6.32-131.0.15.el6 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2011:0542 | 2011-05-19T00:00:00Z |
| Red Hat Enterprise Linux 6.0 EUS - Server Only | |||
| kernel-0:2.6.32-71.31.1.el6 | cpe:/o:redhat:rhel_eus:6.0 | RHSA-2011:0883 | 2011-06-21T00:00:00Z |
| Red Hat Enterprise MRG 2 | |||
| kernel-rt-0:2.6.33.9-rt31.75.el6rt | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2011:1253 | 2011-09-12T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2240-1 | linux-2.6 security update |
Debian DSA |
DSA-2264-1 | linux-2.6 security update |
EUVD |
EUVD-2011-1104 | The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL. |
Ubuntu USN |
USN-1159-1 | Linux kernel vulnerabilities (Marvell Dove) |
Ubuntu USN |
USN-1161-1 | Linux kernel vulnerabilities (EC2) |
Ubuntu USN |
USN-1162-1 | Linux kernel vulnerabilities (Marvell Dove) |
Ubuntu USN |
USN-1168-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-1183-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-1186-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-1187-1 | Linux kernel (Maverick backport) vulnerabilities |
Ubuntu USN |
USN-1202-1 | Linux kernel (OMAP4) vulnerabilities |
Ubuntu USN |
USN-1204-1 | Linux kernel (i.MX51) vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.417% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.