CVE-2011-1771

The cifs_close function in fs/cifs/file.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact by setting the O_DIRECT flag during an attempt to open a file on a CIFS filesystem.

• CWE-476

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7797069305d13252fd66cf722aa8f2cbeb3c95cd
• http://marc.info/?l=linux-cifs&m=130204357001849&w=2Exploit, Third Party Advisory
• http://marc.info/?l=linux-cifs&m=130204730006155&w=2Third Party Advisory
• http://securityreason.com/securityalert/8367Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39Release Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/05/09/2Exploit, Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=703016Exploit, Issue Tracking, Patch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7797069305d13252fd66cf722aa8f2cbeb3c95cd
• http://marc.info/?l=linux-cifs&m=130204357001849&w=2Exploit, Third Party Advisory
• http://marc.info/?l=linux-cifs&m=130204730006155&w=2Third Party Advisory
• http://securityreason.com/securityalert/8367Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39Release Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/05/09/2Exploit, Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=703016Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Sep 6, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1765Cross-site scripting (XSS) vulnerability in MediaWiki before…
• CVE-2011-1766includes/User.php in MediaWiki before 1.16.5, when wgBlockDi…
• CVE-2011-1767net/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip…
• CVE-2011-1768The tunnels implementation in the Linux kernel before 2.6.34…
• CVE-2011-1769SystemTap 1.4 and earlier, when unprivileged (aka stapusr) m…
• CVE-2011-1770Integer underflow in the dccp_parse_options function (net/dc…7.5
• CVE-2011-1772Multiple cross-site scripting (XSS) vulnerabilities in XWork…
• CVE-2011-1773virt-v2v before 0.8.4 does not preserve the VNC console pass…
• CVE-2011-1774WebKit in Apple Safari before 5.0.6 has improper libxslt sec…
• CVE-2011-1775The CSecurityTLS::processMsg function in common/rfb/CSecurit…
• CVE-2011-1776The is_gpt_valid function in fs/partitions/efi.c in the Linu…6.1
• CVE-2011-1777Multiple buffer overflows in the (1) heap_add_entry and (2) …