Linux · Linux Kernel · CVE-2012-0038
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 3.1.9
**Description**
The issue is caused by an integer overflow in the `xfs acl from disk` function, which can lead to a heap-based buffer overflow when a local user interacts with a filesystem containing a malformed ACL, resulting in a denial of service (panic).
**Recommendations**
For Linux kernel versions prior to 3.1.9, update to version 3.1.9 or later to resolve the issue.