CVE

Id
55376  
CVE No.
CVE-2012-2133  
Status
Candidate  
Description
Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers improper handling of quota data.  
Phase
Assigned (20120404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
578638 55376 CVE-2012-2133 MLIST:[oss-security] 20120424 Re: CVE Request: use after free bug in "quota" handling in hugetlb code  View
578639 55376 CVE-2012-2133 URL:http://www.openwall.com/lists/oss-security/2012/04/24/12  View
578640 55376 CVE-2012-2133 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=90481622d75715bfcb68501280a917dbfe516029  View
578641 55376 CVE-2012-2133 CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.6  View
578642 55376 CVE-2012-2133 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=817430  View
578643 55376 CVE-2012-2133 CONFIRM:https://github.com/torvalds/linux/commit/90481622d75715bfcb68501280a917dbfe516029  View
578644 55376 CVE-2012-2133 BID:53233  View
578645 55376 CVE-2012-2133 URL:http://www.securityfocus.com/bid/53233  View
578646 55376 CVE-2012-2133 XF:linux-kernel-hugepages-dos(75168)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27326 JVNDB-2012-003033 Apache Sling におけるサービス運用妨害 (無限ループ) の脆弱性 Apache Sling の org.apache.sling.servlets.post バンドル内の POST サーブレットの @CopyFrom 操作は、祖先ノードが子孫ノードへコピーされることを制限しないため、サービス運用妨害 (無限ループ) 状態となる脆弱性が存在します。 CVE-2012-2138 55376 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003033.html  View