The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2011-05-09T19:00:00

Updated: 2024-08-06T22:14:27.339Z

Reserved: 2011-02-24T00:00:00

Link: CVE-2011-1090

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-05-09T19:55:02.553

Modified: 2024-11-21T01:25:30.000

Link: CVE-2011-1090

cve-icon Redhat

Severity : Moderate

Publid Date: 2011-03-05T00:00:00Z

Links: CVE-2011-1090 - Bugzilla