CVE-2011-4325 REJECTED

The NFS implementation in Linux kernel before 2.6.31-rc6 calls certain functions without properly initializing certain data, which allows local users to cause a denial of service (NULL pointer dereference and O_DIRECT oops), as demonstrated using diotest4 from LTP.

EPSS 0.06% · 19.3th percentile

Risk Scores

EPSS Score
0.06%
19.3th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlinux-lts-vivid0
Ubuntu:14.04:LTSlinux-grouper0, 3.1.10-7.27, 3.1.10-6.25
Ubuntu:14.04:LTSlinux0
Ubuntu:14.04:LTSlinux-lts-utopic0
Ubuntu:14.04:LTSlinux-maguro0
Ubuntu:14.04:LTSlinux-mako0
Ubuntu:14.04:LTSlinux-goldfish0, 3.4.0-1.7
Ubuntu:14.04:LTSlinux-manta0
Ubuntu:14.04:LTSlinux-flo0

Timeline

References

Open in Interactive Console →