CVE-2012-1097

Published: May 17, 2012Modified: Apr 29, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a (1) PTRACE_GETREGSET or (2) PTRACE_SETREGSET ptrace call.

Affected (12)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux, Enterprise Mrg · Suse: Linux Enterprise Desktop, Linux Enterprise High Availability Extension, Linux Enterprise Server

1 product

2 products

Enterprise Linux

3 products

Linux Enterprise Desktop

Linux Enterprise High Availability Extension

Linux Enterprise Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.0.24
Linux Linux Kernel	From 3.1 to 3.2.10

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Mrg	Version 2.0

Configuration C

8 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 11 sp1
Suse Linux Enterprise Desktop	Version 11 sp2
Suse Linux Enterprise High Availability Extension	Version 11 sp1
Suse Linux Enterprise High Availability Extension	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp2

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (24)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c8e252586f8d5de906385d8cf6385fee289a825e

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0481.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0531.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/48842

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/48898

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/48964

Source: secalert@redhat.com

Broken Link

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10

Source: secalert@redhat.com

Mailing ListPatchVendor Advisory

http://www.openwall.com/lists/oss-security/2012/03/05/1

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=799209

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://github.com/torvalds/linux/commit/c8e252586f8d5de906385d8cf6385fee289a825e

Source: secalert@redhat.com

PatchThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c8e252586f8d5de906385d8cf6385fee289a825e

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0481.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0531.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/48842

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/48898

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/48964

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchVendor Advisory

http://www.openwall.com/lists/oss-security/2012/03/05/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=799209

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://github.com/torvalds/linux/commit/c8e252586f8d5de906385d8cf6385fee289a825e

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.