PT-2012-1861 · Linux+1 · Linux Kernel+1

Eugene Teo · Published 2012-01-10 · Updated 2023-02-13 · CVE-2011-4325

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.31-rc6

Description The issue is related to the NFS implementation in the Linux kernel, where certain functions are called without properly initializing specific data. This can be exploited by local users to cause a denial of service, resulting in a NULL pointer dereference and O DIRECT oops. An example of exploitation is demonstrated using the diotest4 test from the LTP suite.

Recommendations For Linux kernel versions prior to 2.6.31-rc6, update to version 2.6.31-rc6 or later to resolve the issue.

Fix

Related Identifiers

CVE-2011-4325

RHSA-2012:0007

RHSA-2012_0007

Affected Products

Linux Kernel

Red Hat

References · 26

• https://bdu.fstec.ru/vul/2015-04359 · Security Note
• https://ubuntu.com/security/CVE-2011-4325 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2011-4325 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-4325 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-4325 · Vendor Advisory
• https://github.com/torvalds/linux/commit/dc0b027dfadfcb8a5504f7d8052754bf8d501ab9 · Note
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=8762202dd0d6e46854f786bdb6fb3780a1625efe · Note
• https://access.redhat.com/security/cve/CVE-2011-4324 · Note
• http://xorl.wordpress.com/2011/12/08/cve-2011-4132-linux-kernel-jbdjbd2-local-dos · Note
• https://redhat.com/archives/rhsa-announce/2012-January/msg00001.html · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=755455 · Note
• http://securityfocus.com/bid/51366 · Note
• https://lkml.org/lkml/2011/2/7/368 · Note
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=1ae88b2e4 · Note
• https://access.redhat.com/security/cve/CVE-2011-4132 · Note