CVE-2012-2133
MediumUse-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers improper handling of quota data.
CVSS 2.0 score
4.0
AV:L/AC:H/Au:N/C:N/I:N/A:C
Weakness type
CWE-399CVE-2012-2133 is classified as CWE-399
See CWE-399 on MITRE CWE for full details on this weakness type.
References
9 total-
-
-
Debian Securityhttp://www.debian.org/security/2012/dsa-2469
-
-
Frequently asked questions
-
What is CVE-2012-2133?
CVE-2012-2133 is a Medium severity Linux kernel vulnerability with a CVSS score of 4.0 out of 10 . CVE-2012-2133 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2012-2133?
CVE-2012-2133 has a CVSS score of 4.0 out of 10, rated Medium severity (CVSS 2.0). The vector string is
AV:L/AC:H/Au:N/C:N/I:N/A:C. -
Is there a patch available for CVE-2012-2133?
Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2012-2133 patch availability.
-
Is CVE-2012-2133 actively exploited?
No. CVE-2012-2133 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.