CVE-2011-4131
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes...
4.6 MediumFix available
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
Exploit likelihood
0.77%Down 0.8 points since Feb 4, 2022
What each source reports
NVD Score used
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
CVE-2011-4131- CVSS 2.0
- 4.6 Medium
AV:A/AC:H/Au:N/C:N/I:N/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
CVE-2011-4131- Updated
- 2026-11-02
EUVDEUVD-2011-4079 No score
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
EUVD-2011-4079- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-497c-8qgw-xqvj No score
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes...
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
GHSA-497c-8qgw-xqvj- Updated
- 2026-11-02
OSV No score
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
CVE-2011-4131- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-4131 No score
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
DEBIAN-CVE-2011-4131- Updated
- 2026-11-02
OSVSUSE-SU-2015:0481-1 No score
Security update for Linux kernel
The SUSE Linux Enterprise 11 Service Pack 2 kernel was updated to fix a regression introduced by the previous update:
* scsi_dh_alua: Incorrect reference counting in the SCSI ALUA
initialization code lead to system crashes on boot (bnc#858831).
As the update introducing the regression was marked security, this is also marked security even though this bug is not security relevant.
- Record
SUSE-SU-2015:0481-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-4131 No score
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
UBUNTU-CVE-2011-4131- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.2.9-1 | 3.2.9-1 |
linuxDebian:13 |
before 3.2.9-1 | 3.2.9-1 |
linuxDebian:14 |
before 3.2.9-1 | 3.2.9-1 |
kernel-rtRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-debugRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-debuginfo-common-x86_64Red Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-develRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
Show 90 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-rt-docRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-firmwareRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-traceRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernelRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perfRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debugRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-develRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-docRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perfRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernelRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perfRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perfRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernelRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debugRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-docRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernelRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perfRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perfRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernelRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-bootwrapperRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debugRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debug-debuginfoRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debug-develRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debuginfoRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debuginfo-common-i686Red Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debuginfo-common-s390xRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-develRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-docRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-firmwareRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-headersRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-kdumpRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-kdump-debuginfoRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-kdump-develRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
perfRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
perf-debuginfoRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
python-perf-debuginfoRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
python-perfRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4131 is a medium vulnerability (CVSS 4.6) in Linux Kernel, published May 17, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.77%, the 55th percentile. Fixed in linux 3.2.9-1.
References
lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
secunia.com/advisories/48898
openwall.com/lists/oss-security/2011/11/12/1
bugzilla.redhat.com/show_bug.cgi?id=747106
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bf118a342f10dafe44b14451a1392c3254629a1f
rhn.redhat.com/errata/RHSA-2012-1541.html
Show 194 moreShow less
lists.fedoraproject.org/pipermail/package-announce/2012-May/081280.html
github.com/torvalds/linux/commit/bf118a342f10dafe44b14451a1392c3254629a1f
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2
nvd.nist.gov/vuln/detail/CVE-2011-4131
security-tracker.debian.org/tracker/CVE-2011-4131
access.redhat.com/errata/RHSA-2012:0333
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0333.json
cve.org/CVERecord?id=CVE-2011-2918
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.3_Technical_Notes/kernel.html
suse.com/support/update/announcement/2015/suse-su-20150481-1
bugzilla.suse.com/556135
ubuntu.com/security/CVE-2011-4131
This page doesn't list everything
Left out here: 962 references. The JSON record has them.