Veracode Vulnerability DatabaseVERACODE:24501Denial Of Service (DoS)
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
kernel is vulnerable to denial of service. An inconsistency was found in the interaction between the Linux kernel’s method for allocating NFSv4 (Network File System version 4) ACL data and the method by which it was freed. This inconsistency led to a kernel panic which could be triggered by a local, unprivileged user with files owned by said user on an NFSv4 share.
References
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.6_Technical_Notes/kernel.html#RHSA-2011-0429
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9e3d724e2145f5039b423c290ce2b2c3d8f94bc
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e9e3d724e2145f5039b423c290ce2b2c3d8f94bc
lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
openwall.com/lists/oss-security/2011/03/07/12
openwall.com/lists/oss-security/2011/03/07/2
secunia.com/advisories/46397
securitytracker.com/id?1025336
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
www.securityfocus.com/archive/1/520102/100/0/threaded
www.vmware.com/security/advisories/VMSA-2011-0012.html
access.redhat.com/errata/RHSA-2011:0429
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=682641
Related
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C