PT-2012-3944 · Linux+3 · Linux Kernel+3

Stephan Mueller · Published 2012-05-14 · Updated 2023-02-13 · CVE-2012-2313

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.3.7

Description The issue allows local users to write data to an Ethernet adapter via an ioctl call due to the rio ioctl function in drivers/net/ethernet/dlink/dl2k.c not restricting access to the SIOCSMIIREG command.

Recommendations For versions prior to 3.3.7, update to version 3.3.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the SIOCSMIIREG command to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CESA-2012_1304

CVE-2012-2313

RHSA-2012:1174

RHSA-2012:1282

RHSA-2012:1304

RHSA-2012:1481

RHSA-2012:1541

RHSA-2012:1589

RHSA-2012_1174

RHSA-2012_1304

SUSE-SU-2015:0481-1

USN-1471-1

USN-1472-1

USN-1473-1

USN-1474-1

USN-1476-1

USN-1488-1

USN-1490-1

USN-1491-1

USN-1492-1

USN-1493-1

USN-1530-1

Affected Products

Centos

Linux Kernel

Red Hat

Suse

References · 34

• 🔥 https://github.com/torvalds/linux/commit/1bb57e940e1958e40d51f2078f50c3a96a9b2d75 · Exploit
• https://ubuntu.com/security/notices/USN-1474-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-2313 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1471-1 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=139447903326211&w=2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1490-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1589.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1174.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-2313 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1488-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-1304.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1491-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-2313 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-2035.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2012-2313 · Security Note