PT-2012-3077

CVE-2012-1090

·

Publicado

2012-02-28

·

Atualizado

2021-07-15

Descrição por

CVSS 3.1
5.5
Média
MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.2.10
Description The issue allows local users to cause a denial of service via attempted access to a special file, such as a FIFO. This occurs because the cifs code attempts to open files on lookup under certain circumstances, and if the opened file is a special file, the open filehandle is leaked, leading to a dentry refcount mismatch and an OOPS on umount.
Recommendations For Linux kernel versions prior to 3.2.10, update to version 3.2.10 or later to resolve the issue. As a temporary workaround, consider restricting access to special files, such as FIFOs, to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
CESA-2012_0481
DSA-2443-1
RHSA-2012:0481
RHSA-2012_0481
USN-1405-1
USN-1425-1
USN-1426-1
USN-1431-1
USN-1432-1
USN-1433-1
USN-1440-1
USN-1446-1
USN-1458-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾