CVE-2012-1090

MEDIUM

Linux Kernel < 3.2.10 - Denial of Service via CIFS Special File Access

Title source: llm
STIX 2.1

Description

The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.

References (10)

Core 10
Core References
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-0531.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-0481.html
Mailing List, Patch, Vendor Advisory x_refsource_confirm
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48964
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=798293
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48842
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/02/28/4

Scores

CVSS v3 5.5
EPSS 0.0006
EPSS Percentile 18.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (5)
linux/linux_kernel < 3.2.10
redhat/enterprise_mrg 2.0
suse/linux_enterprise_desktop 11 sp1 (2 CPE variants)
suse/linux_enterprise_high_availability_extension 11 sp1 (2 CPE variants)
suse/linux_enterprise_server 11 sp1 (4 CPE variants)
Published May 17, 2012
Tracked Since Feb 18, 2026