CVE-2012-2745

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.3.2

Description The issue allows local users to cause a denial of service (panic) via a crafted application that uses the fork system call. This is due to the copy creds function in kernel/cred.c providing an invalid replacement session keyring to a child process.

Recommendations For versions prior to 3.3.2, update to version 3.3.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the fork system call in sensitive applications until a patch is available.