PT-2012-4003 · Linux+3 · Linux Kernel+3

Christoph Lameter · Published 2012-06-13 · Updated 2023-02-13 · CVE-2012-2390

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.4.2

Description The issue is related to a memory leak in the Linux kernel, specifically in the mm/hugetlb.c file. It allows local users to cause a denial of service, which can result in memory consumption or a system crash. This is achieved through invalid MAP HUGETLB mmap operations.

Recommendations For versions prior to 3.4.2, update to version 3.4.2 or later to resolve the issue.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CESA-2012_1304

CVE-2012-2390

RHSA-2012:1150

RHSA-2012:1304

RHSA-2012_1304

SUSE-SU-2015:0481-1

USN-1508-1

USN-1515-1

USN-1531-1

USN-1533-1

USN-1534-1

USN-1535-1

USN-1538-1

USN-1539-1

Affected Products

Centos

Linux Kernel

Red Hat

Suse

References · 26

• 🔥 https://github.com/torvalds/linux/commit/c50ac050811d6485616a193eb0f37bfbd191cc89 · Exploit
• https://linux.oracle.com/errata/ELSA-2012-2035.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1508-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1533-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-2390 · Vendor Advisory
• https://ubuntu.com/security/CVE-2012-2390 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2012-2390 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-2390 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1539-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2390 · Security Note
• http://ubuntu.com/usn/USN-1515-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1538-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1535-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-2390 · Vendor Advisory
• http://ubuntu.com/usn/USN-1535-1 · Vendor Advisory