CVE-2012-0028
high
CVSS v3
โ
CVSS v4 NEW
โ
VIR risk
7.2
Description
The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.
Predictions
Exploit likelihood
20%
Patch ETA
โ
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or โ if you've already worked around this in production โ publish your fix to the community-verified tier.
โ Propose a mitigation on Community โ Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
OS impact
Linux kernel Affected 63 releases
| Version | Status | Fixed in |
|---|---|---|
| 2.6.27.61 | Affected | โ |
| 2.6.27.60 | Affected | โ |
| 2.6.27.59 | Affected | โ |
| 2.6.27.58 | Affected | โ |
| 2.6.27.57 | Affected | โ |
| 2.6.27.56 | Affected | โ |
| 2.6.27.55 | Affected | โ |
| 2.6.27.54 | Affected | โ |
| 2.6.27.53 | Affected | โ |
| 2.6.27.52 | Affected | โ |
| 2.6.27.51 | Affected | โ |
| 2.6.27.50 | Affected | โ |
| 2.6.27.49 | Affected | โ |
| 2.6.27.48 | Affected | โ |
| 2.6.27.47 | Affected | โ |
| 2.6.27.46 | Affected | โ |
| 2.6.27.45 | Affected | โ |
| 2.6.27.44 | Affected | โ |
| 2.6.27.43 | Affected | โ |
| 2.6.27.42 | Affected | โ |
| 2.6.27.41 | Affected | โ |
| 2.6.27.40 | Affected | โ |
| 2.6.27.39 | Affected | โ |
| 2.6.27.38 | Affected | โ |
| 2.6.27.37 | Affected | โ |
| 2.6.27.36 | Affected | โ |
| 2.6.27.35 | Affected | โ |
| 2.6.27.34 | Affected | โ |
| 2.6.27.33 | Affected | โ |
| 2.6.27.32 | Affected | โ |
| 2.6.27.31 | Affected | โ |
| 2.6.27.30 | Affected | โ |
| 2.6.27.29 | Affected | โ |
| 2.6.27.28 | Affected | โ |
| 2.6.27.27 | Affected | โ |
| 2.6.27.26 | Affected | โ |
| 2.6.27.25 | Affected | โ |
| 2.6.27.24 | Affected | โ |
| 2.6.27.23 | Affected | โ |
| 2.6.27.22 | Affected | โ |
| 2.6.27.21 | Affected | โ |
| 2.6.27.20 | Affected | โ |
| 2.6.27.19 | Affected | โ |
| 2.6.27.18 | Affected | โ |
| 2.6.27.17 | Affected | โ |
| 2.6.27.16 | Affected | โ |
| 2.6.27.15 | Affected | โ |
| 2.6.27.14 | Affected | โ |
| 2.6.27.13 | Affected | โ |
| 2.6.27.12 | Affected | โ |
| 2.6.27.11 | Affected | โ |
| 2.6.27.10 | Affected | โ |
| 2.6.27.9 | Affected | โ |
| 2.6.27.8 | Affected | โ |
| 2.6.27.7 | Affected | โ |
| 2.6.27.6 | Affected | โ |
| 2.6.27.5 | Affected | โ |
| 2.6.27.4 | Affected | โ |
| 2.6.27.3 | Affected | โ |
| 2.6.27.2 | Affected | โ |
| 2.6.27.1 | Affected | โ |
| 2.6.27 | Affected | โ |
| โ | Affected | โ |
References
- http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8141c7f3e7aee618312fa1c15109e1219de784a7
- http://www.openwall.com/lists/oss-security/2012/05/08/1
- https://bugzilla.redhat.com/show_bug.cgi?id=771764
- https://github.com/torvalds/linux/commit/8141c7f3e7aee618312fa1c15109e1219de784a7
- http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8141c7f3e7aee618312fa1c15109e1219de784a7
- http://www.openwall.com/lists/oss-security/2012/05/08/1
- https://bugzilla.redhat.com/show_bug.cgi?id=771764
- https://github.com/torvalds/linux/commit/8141c7f3e7aee618312fa1c15109e1219de784a7
CWEs
CWE-264
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.