Vulnerability Description
The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 3.2.10 |
| Redhat | Enterprise Mrg | 2.0 |
| Suse | Linux Enterprise Desktop | 11 |
| Suse | Linux Enterprise High Availability Extension | 11 |
| Suse | Linux Enterprise Server | 11 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.htmlMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0481.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0531.htmlThird Party Advisory
- http://secunia.com/advisories/48842Broken Link
- http://secunia.com/advisories/48964Broken Link
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10Mailing ListPatchVendor Advisory
- http://www.openwall.com/lists/oss-security/2012/02/28/4Mailing ListPatchThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=798293Issue TrackingPatchThird Party Advisory
- https://github.com/torvalds/linux/commit/88d7d4e4a439f32acc56a6d860e415ee71d3df0PatchThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.htmlMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0481.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0531.htmlThird Party Advisory
- http://secunia.com/advisories/48842Broken Link
FAQ
What is CVE-2012-1090?
CVE-2012-1090 is a vulnerability with a CVSS score of 5.5 (MEDIUM). The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.
How severe is CVE-2012-1090?
CVE-2012-1090 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-1090?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Redhat Enterprise Mrg, Suse Linux Enterprise Desktop, Suse Linux Enterprise High Availability Extension, Suse Linux Enterprise Server.