CVEvulnerability

CVE-2012-2745

4.7 MEDIUM Published 2012-08-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-08-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-119

Description

The copy_creds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process, which allows local users to cause a denial of service (panic) via a crafted application that uses the fork system call.

Affected configurations

• linux linux kernel (<= 3.3.1) • linux linux kernel 3.3

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References