CVE-2011-0714

Severity: medium (CVSS 5.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-05-04 · updated 2026-06-16
Weakness: CWE-399

Description

Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 might allow remote attackers to cause a denial of service (crash) via malformed data in a packet, related to lockd and the svc_xprt_received function.

Affected products

Linux kernel: 2.6.32
Red Hat Enterprise Linux: 6.0

References

http://openwall.com/lists/oss-security/2011/03/08/17
http://openwall.com/lists/oss-security/2011/03/09/1
https://bugzilla.redhat.com/show_bug.cgi?id=678144
https://rhn.redhat.com/errata/RHSA-2011-0329.html
http://openwall.com/lists/oss-security/2011/03/08/17
http://openwall.com/lists/oss-security/2011/03/09/1
https://bugzilla.redhat.com/show_bug.cgi?id=678144
https://rhn.redhat.com/errata/RHSA-2011-0329.html

Get alerted when CVE-2011-0714 or the next vulnerability affects your stack