CVE-2011-4081

crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.

• CWE-476

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed47b7d142ec99ad6880bbbec51e9f12b3af74c
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/10/27/2Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=749475Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/7ed47b7d142ec99ad6880bbbec51e9f12b3af74cExploit, Patch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed47b7d142ec99ad6880bbbec51e9f12b3af74c
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/10/27/2Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=749475Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/7ed47b7d142ec99ad6880bbbec51e9f12b3af74cExploit, Patch, Third Party Advisory

Published

May 24, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4075The masort function in lib/functions.php in phpLDAPadmin 1.2…
• CVE-2011-4076OpenStack Nova before 2012.1 allows someone with access to a…5.9
• CVE-2011-4077Buffer overflow in the xfs_readlink function in fs/xfs/xfs_v…
• CVE-2011-4078include/iniset.php in Roundcube Webmail 0.5.4 and earlier, w…
• CVE-2011-4079Off-by-one error in the UTF8StringNormalize function in Open…
• CVE-2011-4080The sysrq_sysctl_handler function in kernel/sysctl.c in the …
• CVE-2011-4082A local file inclusion flaw was found in the way the phpLDAP…7.5
• CVE-2011-4083The sosreport utility in the Red Hat sos package before 1.7-…
• CVE-2011-4084Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2011-4085The servlets invoked by httpha-invoker in JBoss Enterprise A…
• CVE-2011-4086The journal_unmap_buffer function in fs/jbd2/transaction.c i…
• CVE-2011-4087The br_parse_ip_options function in net/bridge/br_netfilter.…7.5