NVD

Id
43163  
Name
CVE-2012-1146  
Description
The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by registering memory threshold events.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-05-17  
Modified Date
2013-02-14  
Seq
2012-1146  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217229 43163 CVE-2012-1146 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=371528caec553785c37f73fa3926ea0de84f986f  View
217230 43163 CVE-2012-1146 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10  View
217231 43163 CVE-2012-1146 [oss-security] 20120307 Re: CVE request -- kernel: mm: memcg: unregistring of events attached to the same eventfd can lead to oops  View
217232 43163 CVE-2012-1146 kernel-memcg-dos(73711)  View
217233 43163 CVE-2012-1146 https://bugzilla.redhat.com/show_bug.cgi?id=800813  View
217234 43163 CVE-2012-1146 https://github.com/torvalds/linux/commit/371528caec553785c37f73fa3926ea0de84f986f  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26746 JVNDB-2012-002453 Linux Kernel の mem_cgroup_usage_unregister_event 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の mm/memcontrol.c 内の mem_cgroup_usage_unregister_event 関数は、同じ eventfd にアタッチされた複数のイベントを適切に処理しないため、サービス運用妨害 (NULL ポインタデリファレンスおよびシステムクラッシュ) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。 CVE-2012-1146 54384 CVE-2012-1146 43163 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002453.html 2012-05-17 2012-05-18 View