CVE-2009-3726

Severity

78%

Complexity

99%

Confidentiality

115%

The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect file attributes, which trigger attempted use of an open file that lacks NFSv4 state.

The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect file attributes, which trigger attempted use of an open file that lacks NFSv4 state.

CVSS 2.0 Base Score 7.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:C).

Overview

Type

Linux Kernel

First reported 15 years ago

2009-11-09 19:30:00

Last updated 7 years ago

2017-09-19 01:29:00

Affected Software

Linux Kernel 2.4.1

2.4.1

Linux Kernel 2.4.2

2.4.2

Linux Kernel 2.4.3

2.4.3

Linux Kernel 2.4.4

2.4.4

Linux Kernel 2.4.5

2.4.5

Linux Kernel 2.4.6

2.4.6

Linux Kernel 2.4.7

2.4.7

Linux Kernel 2.4.8

2.4.8

Linux Kernel 2.4.9

2.4.9

Linux Kernel 2.4.10

2.4.10

Linux Kernel 2.4.11

2.4.11

Linux Kernel 2.4.12

2.4.12

Linux Kernel 2.4.13

2.4.13

Linux Kernel 2.4.14

2.4.14

Linux Kernel 2.4.15

2.4.15

Linux Kernel 2.4.16

2.4.16

Linux Kernel 2.4.17

2.4.17

Linux Kernel 2.4.18

2.4.18

Linux Kernel 2.4.19

2.4.19

Linux Kernel 2.4.20

2.4.20

Linux Kernel 2.4.21

2.4.21

Linux Kernel 2.4.22

2.4.22

Linux Kernel 2.4.23

2.4.23

Linux Kernel 2.4.24

2.4.24

Linux Kernel 2.4.25

2.4.25

Linux Kernel 2.4.26

2.4.26

Linux Kernel 2.4.27

2.4.27

Linux Kernel 2.4.28

2.4.28

Linux Kernel 2.4.29

2.4.29

Linux Kernel 2.4.30

2.4.30

Linux Kernel 2.4.30 rc2

2.4.30

Linux Kernel 2.4.30 rc3

2.4.30

Linux Kernel 2.4.31

2.4.31

Linux Kernel 2.4.32

2.4.32

Linux Kernel 2.4.33

2.4.33

Linux Kernel 2.4.35.2

2.4.35.2

Linux Kernel 2.6.0

2.6.0

Linux Kernel 2.6.1

2.6.1

Linux Kernel 2.6.2

2.6.2

Linux Kernel 2.6.10

2.6.10

Linux Kernel 2.6.11

2.6.11

Linux Kernel 2.6.11.1

2.6.11.1

Linux Kernel 2.6.11.2

2.6.11.2

Linux Kernel 2.6.11.3

2.6.11.3

Linux Kernel 2.6.11.4

2.6.11.4

Linux Kernel 2.6.11.5

2.6.11.5

Linux Kernel 2.6.11.6

2.6.11.6

Linux Kernel 2.6.11.7

2.6.11.7

Linux Kernel 2.6.11.8

2.6.11.8

Linux Kernel 2.6.11.9

2.6.11.9

Linux Kernel 2.6.11.10

2.6.11.10

Linux Kernel 2.6.11.11

2.6.11.11

Linux Kernel 2.6.11.12

2.6.11.12

Linux Kernel 2.6.12

2.6.12

Linux Kernel 2.6.12.1

2.6.12.1

Linux Kernel 2.6.12.2

2.6.12.2

Linux Kernel 2.6.12.3

2.6.12.3

Linux Kernel 2.6.12.4

2.6.12.4

Linux Kernel 2.6.12.5

2.6.12.5

Linux Kernel 2.6.12.6

2.6.12.6

Linux Kernel 2.6.13

2.6.13

Linux Kernel 2.6.13.1

2.6.13.1

Linux Kernel 2.6.13.2

2.6.13.2

Linux Kernel 2.6.13.3

2.6.13.3

Linux Kernel 2.6.13.4

2.6.13.4

Linux Kernel 2.6.13.5

2.6.13.5

Linux Kernel 2.6.14

2.6.14

Linux Kernel 2.6.14.1

2.6.14.1

Linux Kernel 2.6.14.2

2.6.14.2

Linux Kernel 2.6.14.3

2.6.14.3

Linux Kernel 2.6.14.4

2.6.14.4

Linux Kernel 2.6.14.5

2.6.14.5

Linux Kernel 2.6.14.6

2.6.14.6

Linux Kernel 2.6.14.7

2.6.14.7

Linux Kernel 2.6.15

2.6.15

Linux Kernel 2.6.15.1

2.6.15.1

Linux Kernel 2.6.15.2

2.6.15.2

Linux Kernel 2.6.15.3

2.6.15.3

Linux Kernel 2.6.15.4

2.6.15.4

Linux Kernel 2.6.15.5

2.6.15.5

Linux Kernel 2.6.15.6

2.6.15.6

Linux Kernel 2.6.15.7

2.6.15.7

Linux Kernel 2.6.16

2.6.16

Linux Kernel 2.6.16.1

2.6.16.1

Linux Kernel 2.6.16.2

2.6.16.2

Linux Kernel 2.6.16.3

2.6.16.3

Linux Kernel 2.6.16.4

2.6.16.4

Linux Kernel 2.6.16.5

2.6.16.5

Linux Kernel 2.6.16.6

2.6.16.6

Linux Kernel 2.6.16.7

2.6.16.7

Linux Kernel 2.6.16.8

2.6.16.8

Linux Kernel 2.6.16.9

2.6.16.9

Linux Kernel 2.6.16.10

2.6.16.10

Linux Kernel 2.6.16.11

2.6.16.11

Linux Kernel 2.6.16.12

2.6.16.12

Linux Kernel 2.6.16.13

2.6.16.13

Linux Kernel 2.6.16.14

2.6.16.14

Linux Kernel 2.6.16.15

2.6.16.15

Linux Kernel 2.6.16.16

2.6.16.16

Linux Kernel 2.6.16.17

2.6.16.17

Linux Kernel 2.6.16.18

2.6.16.18

Linux Kernel 2.6.16.19

2.6.16.19

Linux Kernel 2.6.16.20

2.6.16.20

Linux Kernel 2.6.16.21

2.6.16.21

Linux Kernel 2.6.16.22

2.6.16.22

Linux Kernel 2.6.16.23

2.6.16.23

Linux Kernel 2.6.16.24

2.6.16.24

Linux Kernel 2.6.16.25

2.6.16.25

Linux Kernel 2.6.16.26

2.6.16.26

Linux Kernel 2.6.16.27

2.6.16.27

Linux Kernel 2.6.16.28

2.6.16.28

Linux Kernel 2.6.16.29

2.6.16.29

Linux Kernel 2.6.16.30

2.6.16.30

Linux Kernel 2.6.16.31

2.6.16.31

Linux Kernel 2.6.16.32

2.6.16.32

Linux Kernel 2.6.16.33

2.6.16.33

Linux Kernel 2.6.16.34

2.6.16.34

Linux Kernel 2.6.16.35

2.6.16.35

Linux Kernel 2.6.16.36

2.6.16.36

Linux Kernel 2.6.16.37

2.6.16.37

Linux Kernel 2.6.16.38

2.6.16.38

Linux Kernel 2.6.16.39

2.6.16.39

Linux Kernel 2.6.16.40

2.6.16.40

Linux Kernel 2.6.16.41

2.6.16.41

Linux Kernel 2.6.16.42

2.6.16.42

Linux Kernel 2.6.16.43

2.6.16.43

Linux Kernel 2.6.16.44

2.6.16.44

Linux Kernel 2.6.16.45

2.6.16.45

Linux Kernel 2.6.16.46

2.6.16.46

Linux Kernel 2.6.16.47

2.6.16.47

Linux Kernel 2.6.16.48

2.6.16.48

Linux Kernel 2.6.16.49

2.6.16.49

Linux Kernel 2.6.16.50

2.6.16.50

Linux Kernel 2.6.16.51

2.6.16.51

Linux Kernel 2.6.16.52

2.6.16.52

Linux Kernel 2.6.16.53

2.6.16.53

Linux Kernel 2.6.16.54

2.6.16.54

Linux Kernel 2.16.55

2.6.16.55

Linux Kernel 2.6.16.56

2.6.16.56

Linux Kernel 2.6.16.57

2.6.16.57

Linux Kernel 2.6.16.58

2.6.16.58

Linux Kernel 2.6.16.59

2.6.16.59

Linux Kernel 2.6.16.60

2.6.16.60

Linux Kernel 2.6.16.61

2.6.16.61

Linux Kernel 2.6.16.62

2.6.16.62

Linux Kernel 2.6.17

2.6.17

Linux Kernel 2.6.17.1

2.6.17.1

Linux Kernel 2.6.17.2

2.6.17.2

Linux Kernel 2.6.17.3

2.6.17.3

Linux Kernel 2.6.17.4

2.6.17.4

Linux Kernel 2.6.17.5

2.6.17.5

Linux Kernel 2.6.17.6

2.6.17.6

Linux Kernel 2.6.17.7

2.6.17.7

Linux Kernel 2.6.17.8

2.6.17.8

Linux Kernel 2.6.17.9

2.6.17.9

Linux Kernel 2.6.17.10

2.6.17.10

Linux Kernel 2.6.17.11

2.6.17.11

Linux Kernel 2.6.17.12

2.6.17.12

Linux Kernel 2.6.17.13

2.6.17.13

Linux Kernel 2.6.17.14

2.6.17.14

Linux Kernel 2.6.18

2.6.18

Linux Kernel 2.6.18 Release Candidate 1

2.6.18

Linux Kernel 2.6.18 Release Candidate 2

2.6.18

Linux Kernel 2.6.18 Release Candidate 3

2.6.18

Linux Kernel 2.6.18 Release Candidate 4

2.6.18

Linux Kernel 2.6.18 Release Candidate 5

2.6.18

Linux Kernel 2.6.18 Release Candidate 6

2.6.18

Linux Kernel 2.6.18 Release Candidate 7

2.6.18

Linux Kernel 2.6.18.1

2.6.18.1

Linux Kernel 2.6.18.2

2.6.18.2

Linux Kernel 2.6.18.3

2.6.18.3

Linux Kernel 2.6.18.4

2.6.18.4

Linux Kernel 2.6.18.5

2.6.18.5

Linux Kernel 2.6.18.6

2.6.18.6

Linux Kernel 2.6.18.7

2.6.18.7

Linux Kernel 2.6.18.8

2.6.18.8

Linux Kernel 2.6.19

2.6.19

Linux Kernel 2.6.19.1

2.6.19.1

Linux Kernel 2.6.19.2

2.6.19.2

Linux Kernel 2.6.19.3

2.6.19.3

Linux Kernel 2.6.19.4

2.6.19.4

Linux Kernel 2.6.19.5

2.6.19.5

Linux Kernel 2.6.19.6

2.6.19.6

Linux Kernel 2.6.19.7

2.6.19.7

Linux Kernel 2.6.20

2.6.20

Linux Kernel 2.6.20.1

2.6.20.1

Linux Kernel 2.6.20.2

2.6.20.2

Linux Kernel 2.6.20.3

2.6.20.3

Linux Kernel 2.6.20.4

2.6.20.4

Linux Kernel 2.6.20.5

2.6.20.5

Linux Kernel 2.6.20.6

2.6.20.6

Linux Kernel 2.6.20.7

2.6.20.7

Linux Kernel 2.6.20.8

2.6.20.8

Linux Kernel 2.6.20.9

2.6.20.9

Linux Kernel 2.6.20.10

2.6.20.10

Linux Kernel 2.6.20.11

2.6.20.11

Linux Kernel 2.6.20.12

2.6.20.12

Linux Kernel 2.6.20.13

2.6.20.13

Linux Kernel 2.6.20.14

2.6.20.14

Linux Kernel 2.6.20.15

2.6.20.15

Linux Kernel 2.6.20.16

2.6.20.16

Linux Kernel 2.6.20.17

2.6.20.17

Linux Kernel 2.6.20.18

2.6.20.18

Linux Kernel 2.6.20.19

2.6.20.19

Linux Kernel 2.6.20.20

2.6.20.20

Linux Kernel 2.6.20.21

2.6.20.21

Linux Kernel 2.6.21

2.6.21

Linux Kernel 2.6.21.1

2.6.21.1

Linux Kernel 2.6.21.2

2.6.21.2

Linux Kernel 2.6.21.3

2.6.21.3

Linux Kernel 2.6.21.4

2.6.21.4

Linux Kernel 2.6.21.5

2.6.21.5

Linux Kernel 2.6.21.6

2.6.21.6

Linux Kernel 2.6.21.7

2.6.21.7

Linux Kernel 2.6.22

2.6.22

Linux Kernel 2.6.22.1

2.6.22.1

Linux Kernel 2.6.22.2

2.6.22.2

Linux Kernel 2.6.22.3

2.6.22.3

Linux Kernel 2.6.22.4

2.6.22.4

Linux Kernel 2.6.22.5

2.6.22.5

Linux Kernel 2.6.22.6

2.6.22.6

Linux Kernel 2.6.22.7

2.6.22.7

Linux Kernel 2.6.22.8

2.6.22.8

Linux Kernel 2.6.22.9

2.6.22.9

Linux Kernel 2.6.22.10

2.6.22.10

Linux Kernel 2.6.22.11

2.6.22.11

Linux Kernel 2.6.22.12

2.6.22.12

Linux Kernel 2.6.22.13

2.6.22.13

Linux Kernel 2.6.22.14

2.6.22.14

Linux Kernel 2.6.22.15

2.6.22.15

Linux Kernel 2.6.22.16

2.6.22.16

Linux Kernel 2.6.22.17

2.6.22.17

Linux Kernel 2.6.22.18

2.6.22.18

Linux Kernel 2.6.22.19

2.6.22.19

Linux Kernel 2.6.22.20

2.6.22.20

Linux Kernel 2.6.22.21

2.6.22.21

Linux Kernel 2.6.22.22

2.6.22.22

Linux Kernel 2.6.23

2.6.23

Linux Kernel 2.6.23 Release Candidate 1

2.6.23

Linux Kernel 2.6.23 release candidate 2

2.6.23

Linux Kernel 2.6.23.1

2.6.23.1

Linux Kernel 2.6.23.2

2.6.23.2

Linux Kernel 2.6.23.3

2.6.23.3

Linux Kernel 2.6.23.4

2.6.23.4

Linux Kernel 2.6.23.5

2.6.23.5

Linux Kernel 2.6.23.6

2.6.23.6

Linux Kernel 2.6.23.7

2.6.23.7

Linux Kernel 2.6.23.8

2.6.23.8

Linux Kernel 2.6.23.9

2.6.23.9

Linux Kernel 2.6.23.10

2.6.23.10

Linux Kernel 2.6.23.11

2.6.23.11

Linux Kernel 2.6.23.12

2.6.23.12

Linux Kernel 2.6.23.13

2.6.23.13

Linux Kernel 2.6.23.14

2.6.23.14

Linux Kernel 2.6.23.16

2.6.23.15

Linux Kernel 2.6.23.16

2.6.23.16

Linux Kernel 2.6.23.17

2.6.23.17

Linux Kernel 2.6.24

2.6.24

Linux Kernel 2.6.24 Release Candidate 1

2.6.24

Linux Kernel 2.6.24 Release Candidate 2

2.6.24

Linux Kernel 2.6.24 Release Candidate 3

2.6.24

Linux Kernel 2.6.24 Release Candidate 4

2.6.24

Linux Kernel 2.6.24 Release Candidate 5

2.6.24

Linux Kernel 2.6.24.1

2.6.24.1

Linux Kernel 2.6.24.2

2.6.24.2

Linux Kernel 2.6.24.3

2.6.24.3

Linux Kernel 2.6.24.4

2.6.24.4

Linux Kernel 2.6.24.5

2.6.24.5

Linux Kernel 2.6.24.6

2.6.24.6

Linux Kernel 2.6.24.7

2.6.24.7

Linux Kernel 2.6.25

2.6.25

Linux Kernel 2.6.25.1

2.6.25.1

Linux Kernel 2.6.25.2

2.6.25.2

Linux Kernel 2.6.25.3

2.6.25.3

Linux Kernel 2.6.25.4

2.6.25.4

Linux Kernel 2.6.25.5

2.6.25.5

Linux Kernel 2.6.25.6

2.6.25.6

Linux Kernel 2.6.25.7

2.6.25.7

Linux Kernel 2.6.25.8

2.6.25.8

Linux Kernel 2.6.25.9

2.6.25.9

Linux Kernel 2.6.25.10

2.6.25.10

Linux Kernel 2.6.25.11

2.6.25.11

Linux Kernel 2.6.25.12

2.6.25.12

Linux Kernel 2.6.25.13

2.6.25.13

Linux Kernel 2.6.25.14

2.6.25.14

Linux Kernel 2.6.25.15

2.6.25.15

Linux Kernel 2.6.25.16

2.6.25.16

Linux Kernel 2.6.25.17

2.6.25.17

Linux Kernel 2.6.25.18

2.6.25.18

Linux Kernel 2.6.25.19

2.6.25.19

Linux Kernel 2.6.25.20

2.6.25.20

Linux Kernel 2.6.26

2.6.26

Linux Kernel 2.6.26 Release Candidate 4

2.6.26

Linux Kernel 2.6.26.1

2.6.26.1

Linux Kernel 2.6.26.2

2.6.26.2

Linux Kernel 2.6.26.3

2.6.26.3

Linux Kernel 2.6.26.4

2.6.26.4

Linux Kernel 2.6.26.5

2.6.26.5

Linux Kernel 2.6.26.6

2.6.26.6

Linux Kernel 2.6.26.7

2.6.26.7

Linux Kernel 2.6.26.8

2.6.26.8

Linux Kernel 2.6.27

2.6.27

Linux Kernel 2.6.27 Release Candidate 1

2.6.27

Linux Kernel 2.6.27 Release Candidate 2

2.6.27

Linux Kernel 2.6.27 Release Candidate 3

2.6.27

Linux Kernel 2.6.27 Release Candidate 4

2.6.27

Linux Kernel 2.6.27 Release Candidate 5

2.6.27

Linux Kernel 2.6.27 Release Candidate 6

2.6.27

Linux Kernel 2.6.27 Release Candidate 7

2.6.27

Linux Kernel 2.6.27 Release Candidate 8

2.6.27

Linux Kernel 2.6.27 Release Candidate 9

2.6.27

Linux Kernel 2.6.27.1

2.6.27.1

Linux Kernel 2.6.27.2

2.6.27.2

Linux Kernel 2.6.27.3

2.6.27.3

Linux Kernel 2.6.27.4

2.6.27.4

Linux Kernel 2.6.27.5

2.6.27.5

Linux Kernel 2.6.27.6

2.6.27.6

Linux Kernel 2.6.27.7

2.6.27.7

Linux Kernel 2.6.27.8

2.6.27.8

Linux Kernel 2.6.27.9

2.6.27.9

Linux Kernel 2.6.27.10

2.6.27.10

Linux Kernel 2.6.27.11

2.6.27.11

Linux Kernel 2.6.27.12

2.6.27.12

Linux Kernel 2.6.28

2.6.28

Linux Kernel 2.6.28 Release Candidate 1

2.6.28

Linux Kernel 2.6.28 Release Candidate 2

2.6.28

Linux Kernel 2.6.28 Release Candidate 3

2.6.28

Linux Kernel 2.6.28 Release Candidate 4

2.6.28

Linux Kernel 2.6.28 Release Candidate 5

2.6.28

Linux Kernel 2.6.28 Release Candidate 6

2.6.28

Linux Kernel 2.6.28 Release Candidate 7

2.6.28

Linux Kernel 2.6.28.1

2.6.28.1

Linux Kernel 2.6.28.2

2.6.28.2

Linux Kernel 2.6.28.3

2.6.28.3

Linux Kernel 2.6.28.4

2.6.28.4

Linux Kernel 2.6.28.5

2.6.28.5

Linux Kernel 2.6.28.6

2.6.28.6

Linux Kernel 2.6.28.7

2.6.28.7

Linux Kernel 2.6.28.8

2.6.28.8

Linux Kernel 2.6.28.9

2.6.28.9

Linux Kernel 2.6.29

2.6.29

Linux Kernel 2.6.29 Release Candidate 1

2.6.29

Linux Kernel 2.6.29 Release Candidate 2

2.6.29

Linux Kernel 2.6.29.3

2.6.29.3

Linux Kernel 2.6.29.5

2.6.29.5

Linux Kernel 2.6.30

2.6.30

Linux Kernel 2.6.30 Release Candidate 1

2.6.30

Linux Kernel 2.6.30 Release Candidate 2

2.6.30

Linux Kernel 2.6.30 Release Candidate 3

2.6.30

Linux Kernel 2.6.30 Release Candidate 5

2.6.30

Linux Kernel 2.6.30 Release Candidate 6

2.6.30

Linux Kernel 2.6.31 Release Candidate 1

2.6.31

Linux Kernel 2.6.31 Release Candidate 2

2.6.31

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d953126a28f97ec965d23c69fd5795854c048f30

Patch

SUSE-SA:2009:056

SUSE-SA:2009:061

SUSE-SA:2009:064

SUSE-SA:2010:012

[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates

37909

38794

38834

40218

DSA-2005

http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.31/ChangeLog-2.6.31-rc4

Vendor Advisory

MDVSA-2009:329

MDVSA-2011:051

[oss-security] 20091105 CVE request: kernel: NULL pointer dereference in nfs4_proc_lock()

[oss-security] 20091105 Re: CVE request: kernel: NULL pointer dereference in nfs4_proc_lock()

RHSA-2009:1670

RHSA-2010:0474

36936

[linux-nfs] 20081022 kernel oops in nfs4_proc_lock

USN-864-1

ADV-2010-0528

https://bugzilla.redhat.com/show_bug.cgi?id=529227

oval:org.mitre.oval:def:6636

oval:org.mitre.oval:def:9734

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.