CVE-2011-4131: Medium severity linux kernel vulnerability
Last updated 24 July 2024
Other sources
nfs4getfacl decoding causes a kernel Oops when a server returns more than 2 GETATTR bitmap words in response to the FATTR4ACL attribute request.
While the NFS client only asks for one attribute (FATTR4ACL) in the first bitmap word, the NFSv4 protocol allows for the server to return unbounded bitmaps.
Upstream commit: e5012d1f3861d18c7f3814e757c1c3ab3741dbcd - incomplete, handles only the case when 2 words are expected and 3 are returned
Proposed complete upstream patch: http://www.spinics.net/lists/linux-nfs/msg25288.html
Acknowledgements:
Red Hat would like to thank Andy Adamson for reporting this issue.
— Red Hat
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4131?
CVE-2011-4131 has a severity rating of medium due to the potential for a kernel Oops affecting system stability.
How do I fix CVE-2011-4131?
To fix CVE-2011-4131, you should update the Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.
Which Linux kernel versions are affected by CVE-2011-4131?
CVE-2011-4131 affects Linux kernel versions 3.2, including its release candidates and the first stable release 3.2.1.
What are the potential consequences of CVE-2011-4131?
The potential consequences of CVE-2011-4131 include system crashes and compromised reliability due to unexpected kernel behavior.
Is CVE-2011-4131 a common vulnerability?
CVE-2011-4131 is a known vulnerability specifically impacting older versions of the Linux kernel and may not be widely exploited.