CVE-2011-4131: Linux Kernel

Medium severity, CVSS 4.6. EPSS: 0.8% chance of exploitation in the next 30 days.

The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.

Affected products

• Linux Linux Kernel: version 3.2 only; version 3.2.1 only

Published 2012-05-17. Last modified 2026-06-16.