CVE-2011-2491

MediumCVSS 4.9/10Last modified Jun 16, 2026

Description

The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of service (system hang) via a LOCK_UN flock system call.

Metrics

CVSS 2.0 4.9/10AV:L/AC:L/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b760113a3a155269a3fba93a409c640031dd68f
http://rhn.redhat.com/errata/RHSA-2011-1212.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2011/06/23/6Mailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=709393Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/0b760113a3a155269a3fba93a409c640031dd68fPatch, Third Party Advisory
http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b760113a3a155269a3fba93a409c640031dd68f
http://rhn.redhat.com/errata/RHSA-2011-1212.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2011/06/23/6Mailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=709393Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/0b760113a3a155269a3fba93a409c640031dd68fPatch, Third Party Advisory

Timeline

Published: Mar 1, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-24921.9The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to CVE-2011-24932.1The ext4_fill_super function in fs/ext4/super.c in the Linux kernel before 2.6.39 does not properly initialize a certain error-report data s CVE-2011-24942.1kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a n CVE-2011-24952.1fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to ob CVE-2011-24964.9Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of serv CVE-2011-24978.3Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to c CVE-2011-24985.5The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service (memory consumption) by triggering CVE-2011-24996.1Mambo CMS through 4.6.5 has multiple XSS.CVE-2011-25007.5The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS CVE-2011-25016.5The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 CVE-2011-25024.4runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a mo CVE-2011-25033.7The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not prope