CVE-2011-4131
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes...
4.6 MediumFix available
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
Exploit likelihood
0.77%Down 0.8 points since Feb 4, 2022
What each source reports
NVD Score used
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
CVE-2011-4131- CVSS 2.0
- 4.6 Medium
AV:A/AC:H/Au:N/C:N/I:N/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
CVE-2011-4131- Updated
- 2026-11-02
EUVDEUVD-2011-4079 No score
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
EUVD-2011-4079- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-497c-8qgw-xqvj No score
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes...
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
GHSA-497c-8qgw-xqvj- Updated
- 2026-11-02
OSV No score
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
CVE-2011-4131- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-4131 No score
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
DEBIAN-CVE-2011-4131- Updated
- 2026-11-02
OSVSUSE-SU-2015:0481-1 No score
Security update for Linux kernel
The SUSE Linux Enterprise 11 Service Pack 2 kernel was updated to fix a regression introduced by the previous update:
* scsi_dh_alua: Incorrect reference counting in the SCSI ALUA
initialization code lead to system crashes on boot (bnc#858831).
As the update introducing the regression was marked security, this is also marked security even though this bug is not security relevant.
- Record
SUSE-SU-2015:0481-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-4131 No score
The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
- Record
UBUNTU-CVE-2011-4131- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.2.9-1 | 3.2.9-1 |
linuxDebian:13 |
before 3.2.9-1 | 3.2.9-1 |
linuxDebian:14 |
before 3.2.9-1 | 3.2.9-1 |
kernel-rtRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-debugRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-debuginfo-common-x86_64Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
Show 90 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-rt-docRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-firmwareRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-traceRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 11 CVEs |
before 0:3.0.18-rt34.53.el6rt | 0:3.0.18-rt34.53.el6rt |
kernelRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perfRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debugRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-develRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-docRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perfRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernelRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perfRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perfRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perfRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernelRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perfRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
perfRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.6.32-279.el6 | 0:2.6.32-279.el6 |
kernelRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-bootwrapperRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debugRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debug-debuginfoRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debug-develRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debuginfoRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debuginfo-common-i686Red Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debuginfo-common-s390xRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-develRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-docRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-firmwareRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-headersRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-kdumpRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-kdump-debuginfoRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
kernel-kdump-develRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
perfRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
perf-debuginfoRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
python-perf-debuginfoRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
python-perfRed Hat:rhel_eus:6.2::server From an advisory covering 2 CVEs |
before 0:2.6.32-220.30.1.el6 | 0:2.6.32-220.30.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4131 is a medium vulnerability (CVSS 4.6) in Linux Kernel, published May 17, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.77%, the 55th percentile. Fixed in linux 3.2.9-1.
References
lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
secunia.com/advisories/48898
openwall.com/lists/oss-security/2011/11/12/1
bugzilla.redhat.com/show_bug.cgi?id=747106
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bf118a342f10dafe44b14451a1392c3254629a1f
rhn.redhat.com/errata/RHSA-2012-1541.html
Show 194 moreShow less
lists.fedoraproject.org/pipermail/package-announce/2012-May/081280.html
github.com/torvalds/linux/commit/bf118a342f10dafe44b14451a1392c3254629a1f
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2
nvd.nist.gov/vuln/detail/CVE-2011-4131
security-tracker.debian.org/tracker/CVE-2011-4131
access.redhat.com/errata/RHSA-2012:0333
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0333.json
cve.org/CVERecord?id=CVE-2011-2918
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.3_Technical_Notes/kernel.html
suse.com/support/update/announcement/2015/suse-su-20150481-1
bugzilla.suse.com/556135
ubuntu.com/security/CVE-2011-4131
This page doesn't list everything
Left out here: 962 references. The JSON record has them.