PT-2020-7167 · Linux+1 · Linux Kernel+1

Eugene Teo · Published 2020-02-12 · Updated 2020-02-14 · CVE-2012-0810

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.3

Description The issue allows local users to cause a denial of service, resulting in stack corruption and panic, via a crafted application that triggers certain lock contention. This is due to the int3 handler relying on a per-CPU debug stack.

Recommendations For versions prior to 3.3, update to version 3.3 or later to resolve the issue.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2012-0810

RHSA-2012:0333

Affected Products

Linux Kernel

Suse

References · 6

• https://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git/commit/?id=bcf6b1d78c0bde228929c388978ed3af9a623463 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git/commit/?id=e5d4e1c3ccee18c68f23d62ba77bda26e893d4f0 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0810 · Security Note
• https://t.me/cvenotify/911 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=794557 · Note
• https://t.me/cibsecurity/9783 · Telegram Post