{"id":"UBUNTU-CVE-2011-4131","details":"The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.","modified":"2026-01-30T02:51:24.139855Z","published":"2012-05-17T00:00:00Z","withdrawn":"2025-07-18T16:42:44Z","related":["USN-1457-1","USN-1470-1","USN-1471-1","USN-1472-1","USN-1476-1","USN-1530-1"],"upstream":["CVE-2011-4131"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2011-4131"},{"type":"REPORT","url":"http://www.openwall.com/lists/oss-security/2011/11/13/3"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-1457-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-1470-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-1471-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-1472-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-1476-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-1530-1"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2011-4131"}],"affected":[{"package":{"name":"linux","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/linux@3.11.0-12.19?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-12.19"}]}],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"block-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"block-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"crypto-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"crypto-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"fat-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"fat-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"fb-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"firewire-core-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"floppy-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"fs-core-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"fs-core-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"fs-secondary-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"fs-secondary-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"input-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"input-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"ipmi-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"ipmi-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_version":"3.11.0-12.19","binary_name":"irda-modules-3.11.0-12-generic-di"},{"binary_name":"irda-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"kernel-image-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"kernel-image-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"linux-doc","binary_version":"3.11.0-12.19"},{"binary_name":"linux-headers-3.11.0-12","binary_version":"3.11.0-12.19"},{"binary_name":"linux-headers-3.11.0-12-generic","binary_version":"3.11.0-12.19"},{"binary_name":"linux-headers-3.11.0-12-generic-lpae","binary_version":"3.11.0-12.19"},{"binary_name":"linux-image-3.11.0-12-generic","binary_version":"3.11.0-12.19"},{"binary_name":"linux-image-3.11.0-12-generic-lpae","binary_version":"3.11.0-12.19"},{"binary_name":"linux-image-extra-3.11.0-12-generic","binary_version":"3.11.0-12.19"},{"binary_name":"linux-libc-dev","binary_version":"3.11.0-12.19"},{"binary_name":"linux-source-3.11.0","binary_version":"3.11.0-12.19"},{"binary_version":"3.11.0-12.19","binary_name":"linux-tools-3.11.0-12"},{"binary_name":"linux-tools-3.11.0-12-generic","binary_version":"3.11.0-12.19"},{"binary_name":"linux-tools-3.11.0-12-generic-lpae","binary_version":"3.11.0-12.19"},{"binary_name":"linux-tools-common","binary_version":"3.11.0-12.19"},{"binary_name":"linux-udebs-generic","binary_version":"3.11.0-12.19"},{"binary_name":"linux-udebs-generic-lpae","binary_version":"3.11.0-12.19"},{"binary_version":"3.11.0-12.19","binary_name":"md-modules-3.11.0-12-generic-di"},{"binary_name":"md-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"message-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_version":"3.11.0-12.19","binary_name":"mouse-modules-3.11.0-12-generic-di"},{"binary_name":"mouse-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"multipath-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"multipath-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"nfs-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"nfs-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"nic-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"nic-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"nic-pcmcia-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"nic-shared-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"nic-shared-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"nic-usb-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"nic-usb-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"parport-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"parport-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"pata-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"pcmcia-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"pcmcia-storage-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"plip-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"plip-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"ppp-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"ppp-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_version":"3.11.0-12.19","binary_name":"sata-modules-3.11.0-12-generic-di"},{"binary_name":"sata-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"scsi-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"scsi-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"serial-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"speakup-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"speakup-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"squashfs-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"squashfs-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"storage-core-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"storage-core-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"usb-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"usb-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"},{"binary_name":"virtio-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"vlan-modules-3.11.0-12-generic-di","binary_version":"3.11.0-12.19"},{"binary_name":"vlan-modules-3.11.0-12-generic-lpae-di","binary_version":"3.11.0-12.19"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2011/UBUNTU-CVE-2011-4131.json"}},{"package":{"name":"linux-flo","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/linux-flo@3.4.0-1.3?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-1.3"}]}],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-flo-headers-3.4.0-1","binary_version":"3.4.0-1.3"},{"binary_name":"linux-flo-tools-3.4.0-1","binary_version":"3.4.0-1.3"},{"binary_name":"linux-flo-tools-common","binary_version":"3.4.0-1.3"},{"binary_name":"linux-headers-3.4.0-1-flo","binary_version":"3.4.0-1.3"},{"binary_name":"linux-image-3.4.0-1-flo","binary_version":"3.4.0-1.3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2011/UBUNTU-CVE-2011-4131.json"}},{"package":{"name":"linux-goldfish","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/linux-goldfish@3.4.0-1.9?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-1.9"}]}],"versions":["3.4.0-1.7"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-goldfish-headers-3.4.0-1","binary_version":"3.4.0-1.9"},{"binary_name":"linux-goldfish-tools-3.4.0-1","binary_version":"3.4.0-1.9"},{"binary_name":"linux-headers-3.4.0-1-goldfish","binary_version":"3.4.0-1.9"},{"binary_name":"linux-image-3.4.0-1-goldfish","binary_version":"3.4.0-1.9"},{"binary_name":"linux-tools-3.4.0-1-goldfish","binary_version":"3.4.0-1.9"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2011/UBUNTU-CVE-2011-4131.json"}},{"package":{"name":"linux-mako","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/linux-mako@3.4.0-3.21?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-3.21"}]}],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-headers-3.4.0-3-mako","binary_version":"3.4.0-3.21"},{"binary_name":"linux-image-3.4.0-3-mako","binary_version":"3.4.0-3.21"},{"binary_version":"3.4.0-3.21","binary_name":"linux-mako-headers-3.4.0-3"},{"binary_version":"3.4.0-3.21","binary_name":"linux-mako-tools-3.4.0-3"},{"binary_name":"linux-mako-tools-common","binary_version":"3.4.0-3.21"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2011/UBUNTU-CVE-2011-4131.json"}},{"package":{"name":"linux-manta","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/linux-manta@3.4.0-4.19?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-4.19"}]}],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-headers-3.4.0-4-manta","binary_version":"3.4.0-4.19"},{"binary_name":"linux-image-3.4.0-4-manta","binary_version":"3.4.0-4.19"},{"binary_version":"3.4.0-4.19","binary_name":"linux-manta-headers-3.4.0-4"},{"binary_name":"linux-manta-tools-3.4.0-4","binary_version":"3.4.0-4.19"},{"binary_name":"linux-manta-tools-common","binary_version":"3.4.0-4.19"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2011/UBUNTU-CVE-2011-4131.json"}}],"schema_version":"1.7.3","severity":[{"type":"Ubuntu","score":"medium"}]}