Vulnerability Description
The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial of service (panic) via a crafted application that triggers a race condition.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | <= 3.4.4 |
Related Weaknesses (CWE)
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=
- http://marc.info/?l=bugtraq&m=139447903326211&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0743.html
- http://ubuntu.com/usn/usn-1529-1
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5
- http://www.openwall.com/lists/oss-security/2012/05/18/11
- https://bugzilla.redhat.com/show_bug.cgi?id=822821
- https://github.com/torvalds/linux/commit/26c191788f18129af0eb32a358cdaea0c747962Patch
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=
- http://marc.info/?l=bugtraq&m=139447903326211&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0743.html
- http://ubuntu.com/usn/usn-1529-1
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5
- http://www.openwall.com/lists/oss-security/2012/05/18/11
- https://bugzilla.redhat.com/show_bug.cgi?id=822821
FAQ
What is CVE-2012-2373?
CVE-2012-2373 is a vulnerability with a CVSS score of 4.0 (MEDIUM). The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial o...
How severe is CVE-2012-2373?
CVE-2012-2373 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-2373?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.