Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-4530. PoCs published by halfdog.
AI-analyzed exploit summary The writeup describes a Linux kernel vulnerability (CVE-2012-4530) in binfmt_script handling with CONFIG_MODULES enabled, leading to kernel stack data disclosure and excessive recursion beyond BINPRM_MAX_RECURSION. It explains the method of exploitation via crafted scripts and discusses the limited impact, primarily affecting Ubuntu kernels 3.2.0-29-generic.
Description
The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
Exploits (1)
The writeup describes a Linux kernel vulnerability (CVE-2012-4530) in binfmt_script handling with CONFIG_MODULES enabled, leading to kernel stack data disclosure and excessive recursion beyond BINPRM_MAX_RECURSION. It explains the method of exploitation via crafted scripts and discusses the limited impact, primarily affecting Ubuntu kernels 3.2.0-29-generic.