CVE-2012-2373
6.8 Medium
AI Score
Confidence
High
4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.3%
The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial of service (panic) via a crafted application that triggers a race condition.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26c191788f18129af0eb32a358cdaea0c7479626
marc.info/?l=bugtraq&m=139447903326211&w=2
rhn.redhat.com/errata/RHSA-2012-0743.html
ubuntu.com/usn/usn-1529-1
www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5
www.openwall.com/lists/oss-security/2012/05/18/11
bugzilla.redhat.com/show_bug.cgi?id=822821
github.com/torvalds/linux/commit/26c191788f18129af0eb32a358cdaea0c7479626
Related
6.8 Medium
AI Score
Confidence
High
4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.3%