CVE-2011-4131

Publication date 17 May 2012

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.

From the Ubuntu Security Team

Andy Adamson discovered a flaw in the Linux kernel's NFSv4 implementation. A remote NFS server (attacker) could exploit this flaw to cause a denial of service.

Read the notes from the security team

Status

Package Ubuntu Release Status
linux 14.04 LTS trusty
Not affected
13.10 saucy
Not affected
13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric
Fixed 3.0.0-21.35
11.04 natty
Fixed 2.6.38-15.60
10.10 maverick Ignored end of life
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Ignored end of life
linux-armadaxp 14.04 LTS trusty Not in release
13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric Not in release
11.04 natty Not in release
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release
linux-ec2 14.04 LTS trusty Not in release
13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
11.10 oneiric Not in release
11.04 natty Not in release
10.10 maverick Ignored end of life
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Not in release
linux-flo 14.04 LTS trusty Not in release
13.10 saucy Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
10.04 LTS lucid Not in release
linux-fsl-imx51 14.04 LTS trusty Not in release
13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
11.10 oneiric Not in release
11.04 natty Not in release
10.10 maverick Not in release
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Not in release
linux-goldfish 14.04 LTS trusty Not in release
13.10 saucy Ignored
12.10 quantal Not in release
12.04 LTS precise Not in release
10.04 LTS lucid Not in release
linux-grouper 14.04 LTS trusty Not in release
13.10 saucy Ignored
12.10 quantal Not in release
12.04 LTS precise Not in release
10.04 LTS lucid Not in release
linux-lts-backport-maverick 14.04 LTS trusty Not in release
13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
11.10 oneiric Not in release
11.04 natty Not in release
10.10 maverick Not in release
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Not in release
linux-lts-backport-natty 14.04 LTS trusty Not in release
13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
11.10 oneiric Not in release
11.04 natty Not in release
10.10 maverick Not in release
10.04 LTS lucid
Fixed 2.6.38-15.60~lucid1
8.04 LTS hardy Not in release
linux-lts-backport-oneiric 14.04 LTS trusty Not in release
13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
11.10 oneiric Not in release
11.04 natty Not in release
10.10 maverick Not in release
10.04 LTS lucid
Fixed 3.0.0-21.35~lucid1
8.04 LTS hardy Not in release
linux-lts-quantal 14.04 LTS trusty Not in release
13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise
Not affected
11.10 oneiric Not in release
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release
linux-lts-raring 14.04 LTS trusty Not in release
13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise
Not affected
11.10 oneiric Not in release
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release
linux-lts-saucy 14.04 LTS trusty Not in release
13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise
Not affected
10.04 LTS lucid Not in release
linux-lts-trusty 14.04 LTS trusty Not in release
13.10 saucy Not in release
12.04 LTS precise
Not affected
10.04 LTS lucid Not in release
linux-maguro 14.04 LTS trusty Not in release
13.10 saucy Ignored
12.10 quantal Not in release
12.04 LTS precise Not in release
10.04 LTS lucid Not in release
linux-mako 14.04 LTS trusty Not in release
13.10 saucy Ignored
12.10 quantal Not in release
12.04 LTS precise Not in release
10.04 LTS lucid Not in release
linux-manta 14.04 LTS trusty Not in release
13.10 saucy Ignored
12.10 quantal Not in release
12.04 LTS precise Not in release
10.04 LTS lucid Not in release
linux-mvl-dove 14.04 LTS trusty Not in release
13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
11.10 oneiric Not in release
11.04 natty Not in release
10.10 maverick Ignored end of life
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Not in release
linux-ti-omap4 14.04 LTS trusty Not in release
13.10 saucy
Not affected
13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric
Fixed 3.0.0-1211.23
11.04 natty
Fixed 2.6.38-1209.25
10.10 maverick Ignored end of life
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release

Notes

jdstrand

e5012d1f3861d18c7f3814e757c1c3ab3741dbcd is incomplete http://www.spinics.net/lists/linux-nfs/msg25288.html is proposed patch

apw

http://www.spinics.net/lists/linux-nfs/msg25746.html implies the proposed patch needs further work, awaiting resubmission http://www.spinics.net/lists/linux-nfs/msg26023.html looks to be the fixed patch, waiting on feedback now upstream as bf118a342f10dafe44b14451a1392c3254629a1f

jj

removed original incomplete e5012d1f3861d18c7f3814e757c1c3ab3741dbcd as breakfix

jdstrand

too intrusive to backport. Requires connecting to malicious NFS v4 server

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
linux

References

Related Ubuntu Security Notices (USN)

    • USN-1457-1
    • Linux kernel vulnerabilities
    • 31 May 2012
    • USN-1476-1
    • Linux kernel (OMAP4) vulnerabilities
    • 15 June 2012
    • USN-1470-1
    • Linux kernel (Natty backport) vulnerabilities
    • 12 June 2012
    • USN-1472-1
    • Linux kernel vulnerabilities
    • 12 June 2012
    • USN-1471-1
    • Linux kernel (Oneiric backport) vulnerabilities
    • 12 June 2012
    • USN-1530-1
    • Linux kernel (OMAP4) vulnerabilities
    • 10 August 2012

Other references