PT-2012-3109 · Linux+3 · Linux Kernel+3

Ulrich Obergfell · Published 2012-04-23 · Updated 2017-12-29 · CVE-2012-1179

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:A/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.3.1

Description The issue allows guest OS users to cause a denial of service (host OS crash) by leveraging administrative access to the guest OS, related to the pmd none or clear bad function and page faults for huge pages. A privileged user in the KVM guest can use this flaw to crash the host. An unprivileged local user could use this flaw to crash the system.

Recommendations For versions prior to 3.3.1, update to version 3.3.1 or later to resolve the issue. As a temporary workaround, consider restricting administrative access to the guest OS to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CESA-2012_0743

CVE-2012-1179

RHSA-2012:0743

RHSA-2012:1042

RHSA-2012_0743

USN-1431-1

USN-1433-1

USN-1446-1

Affected Products

Centos

Linux Kernel

Red Hat

Suse

References · 19

• http://marc.info/?l=bugtraq&m=139447903326211&w=2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1431-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0743.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075781.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1446-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-0743.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1433-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2012-1179 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-1179 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1179 · Security Note
• https://cve.org/CVERecord?id=CVE-2012-1179 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html · Vendor Advisory
• https://github.com/torvalds/linux/commit/4a1d704194a441bf83c636004a479e01360ec850 · Note
• http://openwall.com/lists/oss-security/2012/03/15/7 · Note
• http://secunia.com/advisories/48404 · Note