CVE-2012-2133

2012-07-0316:40:32

CWE-399

redhat

web.nvd.nist.gov

cve-2012-2133

linux kernel

use-after-free

vulnerability

denial of service

privilege escalation

hugetlbfs

nvd

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:N/I:N/A:C

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers improper handling of quota data.

Affected configurations

Nvd

Node

linuxlinux_kernelRange≤3.3.5

linuxlinux_kernelMatch3.3

linuxlinux_kernelMatch3.3.1

linuxlinux_kernelMatch3.3.2

linuxlinux_kernelMatch3.3.3

linuxlinux_kernelMatch3.3.4

VendorProductVersionCPE
linuxlinux_kernel3.3.1cpe:/o:linux:linux_kernel:3.3.1:::
linuxlinux_kernel3.3cpe:/o:linux:linux_kernel:3.3:::
linuxlinux_kernel3.3.2cpe:/o:linux:linux_kernel:3.3.2:::
linuxlinux_kernel3.3.4cpe:/o:linux:linux_kernel:3.3.4:::
linuxlinux_kernelcpe:/o:linux:linux_kernel::::
linuxlinux_kernel3.3.3cpe:/o:linux:linux_kernel:3.3.3:::

Vendor	Product	Version	CPE
linux	linux_kernel	3.3.1	cpe:/o:linux:linux_kernel:3.3.1:::
linux	linux_kernel	3.3	cpe:/o:linux:linux_kernel:3.3:::
linux	linux_kernel	3.3.2	cpe:/o:linux:linux_kernel:3.3.2:::
linux	linux_kernel	3.3.4	cpe:/o:linux:linux_kernel:3.3.4:::
linux	linux_kernel		cpe:/o:linux:linux_kernel::::
linux	linux_kernel	3.3.3	cpe:/o:linux:linux_kernel:3.3.3:::