The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.
Advisories
Source ID Title
Debian DSA Debian DSA DSA-2240-1 linux-2.6 security update
Debian DSA Debian DSA DSA-2264-1 linux-2.6 security update
EUVD EUVD EUVD-2011-1104 The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.
Ubuntu USN Ubuntu USN USN-1159-1 Linux kernel vulnerabilities (Marvell Dove)
Ubuntu USN Ubuntu USN USN-1161-1 Linux kernel vulnerabilities (EC2)
Ubuntu USN Ubuntu USN USN-1162-1 Linux kernel vulnerabilities (Marvell Dove)
Ubuntu USN Ubuntu USN USN-1168-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1183-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1186-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1187-1 Linux kernel (Maverick backport) vulnerabilities
Ubuntu USN Ubuntu USN USN-1202-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1204-1 Linux kernel (i.MX51) vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-06T22:14:27.339Z

Reserved: 2011-02-24T00:00:00

Link: CVE-2011-1090

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2011-05-09T19:55:02.553

Modified: 2025-04-11T00:51:21.963

Link: CVE-2011-1090

cve-icon Redhat

Severity : Moderate

Publid Date: 2011-03-05T00:00:00Z

Links: CVE-2011-1090 - Bugzilla

cve-icon OpenCVE Enrichment

No data.