PT-2012-1860

CVE-2011-4324

·

Published

2012-01-10

·

Updated

2023-02-13

Description by

CVSS 2.0
4.9
Medium
MetricsAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.29
Description The issue allows local users to cause a denial of service, resulting in a system crash, by utilizing the mknod system call with a pathname on an NFSv4 filesystem. This is due to a problem in the encode share access function in fs/nfs/nfs4xdr.c.
Recommendations For versions prior to 2.6.29, update to version 2.6.29 or later to resolve the issue. As a temporary workaround, consider restricting access to the mknod system call on NFSv4 filesystems to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
RHSA-2012:0007
RHSA-2012_0007
USN-1390-1
Found an issue in the description? Have something to add? Feel free to write us 👾