CVE-2012-0879

Published: May 17, 2012Modified: Apr 29, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context.

Affected (9)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Debian: Debian Linux · +1 more

Show all products

Linux: Linux Kernel · Canonical: Ubuntu Linux · Debian: Debian Linux · Suse: Linux Enterprise Desktop, Linux Enterprise High Availability Extension, Linux Enterprise Server

1 product

1 product

1 product

3 products

Linux Enterprise Desktop

Linux Enterprise High Availability Extension

Linux Enterprise Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.33

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0

Configuration D

6 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 11 sp1
Suse Linux Enterprise Desktop	Version 11 sp2
Suse Linux Enterprise High Availability Extension	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp2

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (36)

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33

Source: secalert@redhat.com

Broken Link

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=61cc74fbb87af6aa551a06a370590c9bc07e29d9

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b69f2292063d2caf37ca9aec7d63ded203701bf3

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=139447903326211&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0481.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0531.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/48545

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/48842

Source: secalert@redhat.com

Not Applicable

http://www.debian.org/security/2012/dsa-2469

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2012/02/23/5

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.securitytracker.com/id?1027086

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1408-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-1410-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-1411-1

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=796829

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://github.com/torvalds/linux/commit/61cc74fbb87af6aa551a06a370590c9bc07e29d9

Source: secalert@redhat.com

PatchThird Party Advisory

https://github.com/torvalds/linux/commit/b69f2292063d2caf37ca9aec7d63ded203701bf3

Source: secalert@redhat.com

PatchThird Party Advisory

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33