CVE-2012-1146

Medium

Description

The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by registering memory threshold events.

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedMay 17, 2012
First seenMay 17, 2012

How to fix

Update
  • linux linux_kernel3.2.10 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernelv < 3.2.103.2.10
fedoraproject fedora16—
suse linux_enterprise_desktop11—
suse linux_enterprise_high_availability_extension11—
suse linux_enterprise_server11—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.