CVE-2011-4131: The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL r...

Security readout for executives and security teams

This is an old Linux kernel NFSv4 denial-of-service issue. A malicious or faulty remote NFS server could send an oversized ACL bitmap response and trigger a kernel OOPS on a vulnerable client, potentially interrupting workloads that mount NFSv4 shares. Exposure is most likely on legacy Linux systems using vulnerable kernels as NFSv4 clients, especially where they mount untrusted or compromised NFS servers. The provided affected-product data is incomplete, so confirm against vendor advisories and local kernel builds. Treat this as a legacy exposure cleanup item unless vulnerable NFSv4 clients remain in production. Urgency rises where critical systems mount third-party, shared, or poorly controlled NFS servers. Mitigation focus: Upgrade Linux kernels to 3.2.2 or vendor-fixed packages.; Apply relevant Red Hat, SUSE, or Fedora security advisories where applicable.; Avoid mounting NFSv4 shares from untrusted servers on legacy systems..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.