PT-2012-4003 · Linux+3 · Linux Kernel+3

Christoph Lameter · Publicado 2012-06-13 · Atualizado 2023-02-13 · CVE-2012-2390

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.4.2

Description The issue is related to a memory leak in the Linux kernel, specifically in the mm/hugetlb.c file. It allows local users to cause a denial of service, which can result in memory consumption or a system crash. This is achieved through invalid MAP HUGETLB mmap operations.

Recommendations For versions prior to 3.4.2, update to version 3.4.2 or later to resolve the issue.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CESA-2012_1304

CVE-2012-2390

RHSA-2012:1150

RHSA-2012:1304

RHSA-2012_1304

SUSE-SU-2015:0481-1

USN-1508-1

USN-1515-1

USN-1531-1

USN-1533-1

USN-1534-1

USN-1535-1

USN-1538-1

USN-1539-1

Produtos afetados

Centos

Linux Kernel

Red Hat

Suse

Referências · 26

• 🔥 https://github.com/torvalds/linux/commit/c50ac050811d6485616a193eb0f37bfbd191cc89 · Exploit
• https://linux.oracle.com/errata/ELSA-2012-2035.html · Aviso do Fabricante
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.2 · Nota
• https://ubuntu.com/security/notices/USN-1508-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1533-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-2390 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=824345 · Nota
• https://ubuntu.com/security/CVE-2012-2390 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2012-2390 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-2390 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1539-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-2390 · Nota de Segurança
• http://ubuntu.com/usn/USN-1515-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1538-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1535-1 · Aviso do Fabricante