CVE-2013-4591: Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7...

Security readout for executives and security teams

This is an old Linux kernel flaw in NFSv4 ACL handling. A local user on an affected system could crash the machine through memory corruption. The source bundle does not show internet-ranged exploitation or active exploitation, but affected NFSv4 clients with untrusted local users should be patched. Exposure is most likely on Linux systems running kernels before 3.7.2, or vendor kernels before backported fixes, where NFSv4 filesystems are used and local users can interact with those paths. Treat as a targeted operational stability risk, not an internet-facing emergency based on the supplied evidence. Prioritize patching shared Linux hosts, multi-user systems, and NFSv4 clients where a crash would disrupt business operations. Mitigation focus: Upgrade to Linux kernel 3.7.2 or a vendor kernel containing the referenced fix.; Apply applicable Red Hat advisories RHSA-2013:1645 or RHSA-2014:0284 where relevant.; Check current distribution guidance for backported kernel fixes..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.