CVE-2012-1146

Published: May 17, 2012Modified: Apr 29, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by registering memory threshold events.

Affected (6)

Products: Linux: Linux Kernel · Fedoraproject: Fedora · Suse: Linux Enterprise Desktop, Linux Enterprise High Availability Extension, Linux Enterprise Server

1 product

1 product

3 products

Linux Enterprise Desktop

Linux Enterprise High Availability Extension

Linux Enterprise Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.2.10

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 16

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 11 sp2
Suse Linux Enterprise High Availability Extension	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp2

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (20)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=371528caec553785c37f73fa3926ea0de84f986f

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075781.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/48898

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/48964

Source: secalert@redhat.com

Broken Link

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10

Source: secalert@redhat.com

Mailing ListPatchVendor Advisory

http://www.openwall.com/lists/oss-security/2012/03/07/3

Source: secalert@redhat.com

ExploitMailing ListPatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=800813

Source: secalert@redhat.com

ExploitIssue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/73711

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://github.com/torvalds/linux/commit/371528caec553785c37f73fa3926ea0de84f986f

Source: secalert@redhat.com

ExploitPatchThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=371528caec553785c37f73fa3926ea0de84f986f

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075781.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://secunia.com/advisories/48898

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/48964

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchVendor Advisory

http://www.openwall.com/lists/oss-security/2012/03/07/3

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListPatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=800813

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/73711

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://github.com/torvalds/linux/commit/371528caec553785c37f73fa3926ea0de84f986f

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party Advisory

Timeline

No history available yet.