CVE-2012-0879

Published: 23 February 2012

The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context.

From the Ubuntu Security Team

Louis Rilling discovered a flaw in Linux kernel's clone command when CLONE_IO is specified. An unprivileged local user could exploit this to cause a denial of service.

Notes

Author	Note
jdstrand	per Petr Matousek, "Looks like it got fixed in Linux kernel 2.6.33(-rc1)"
apw	CLONE_IO was introduced by the commit below, the bug cannot have existed before then: fadad878cc0640cc9cd5569998bf54b693f7b38b

Priority

Cvss 3 Severity Score

5.5

Score breakdown

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	hardy	Not vulnerable
	lucid	Released (2.6.32-40.87)
	maverick	Ignored (end of life, was pending)
	natty	Not vulnerable (2.6.37-2.9)
	oneiric	Not vulnerable (2.6.39-0.0)
	precise	Not vulnerable (3.1.0-1.1)
	quantal	Not vulnerable (3.1.0-1.0)
	raring	Not vulnerable (3.1.0-1.0)
	upstream	Released (2.6.33~rc1)
	Patches: Introduced by fadad878cc0640cc9cd5569998bf54b693f7b38b Fixed by 61cc74fbb87af6aa551a06a370590c9bc07e29d9 Introduced by fadad878cc0640cc9cd5569998bf54b693f7b38b Fixed by b69f2292063d2caf37ca9aec7d63ded203701bf3
linux-armadaxp Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Does not exist
	natty	Does not exist
	oneiric	Does not exist
	precise	Not vulnerable (3.2.0-1600.1)
	quantal	Not vulnerable (3.2.0-1602.5)
	raring	Does not exist
	upstream	Released (2.6.33~rc1)
linux-ec2 Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Released (2.6.32-344.46)
	maverick	Ignored (end of life)
	natty	Does not exist
	oneiric	Does not exist
	precise	Does not exist
	quantal	Does not exist
	raring	Does not exist
	upstream	Released (2.6.33~rc1)
linux-fsl-imx51 Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Released (2.6.31-612.34)
	maverick	Does not exist
	natty	Does not exist
	oneiric	Does not exist
	precise	Does not exist
	quantal	Does not exist
	raring	Does not exist
	upstream	Released (2.6.33~rc1)
linux-lts-backport-maverick Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Ignored (end of life)
	maverick	Does not exist
	natty	Does not exist
	oneiric	Does not exist
	precise	Does not exist
	quantal	Does not exist
	raring	Does not exist
	upstream	Released (2.6.33~rc1)
linux-lts-backport-natty Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Not vulnerable (2.6.38-1.27~lucid1)
	maverick	Does not exist
	natty	Does not exist
	oneiric	Does not exist
	precise	Does not exist
	quantal	Does not exist
	raring	Does not exist
	upstream	Released (2.6.33~rc1)
linux-lts-backport-oneiric Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Not vulnerable (3.0.0-5.6~lucid1)
	maverick	Does not exist
	natty	Does not exist
	oneiric	Does not exist
	precise	Does not exist
	quantal	Does not exist
	raring	Does not exist
	upstream	Released (2.6.33~rc1)
linux-lts-quantal Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Does not exist
	oneiric	Does not exist
	precise	Not vulnerable
	quantal	Does not exist
	raring	Does not exist
	upstream	Released (2.6.33~rc1)
linux-lts-raring Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Does not exist
	oneiric	Does not exist
	precise	Not vulnerable
	quantal	Does not exist
	raring	Does not exist
	upstream	Released (2.6.33~rc1)
linux-mvl-dove Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Ignored (end of life)
	maverick	Ignored (end of life, was pending)
	natty	Does not exist
	oneiric	Does not exist
	precise	Does not exist
	quantal	Does not exist
	raring	Does not exist
	upstream	Released (2.6.33~rc1)
linux-ti-omap4 Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Does not exist
	maverick	Ignored (end of life, was pending)
	natty	Not vulnerable (2.6.38-1201.2)
	oneiric	Not vulnerable (2.6.38-1309.13)
	precise	Not vulnerable (3.0.0-1401.2)
	quantal	Not vulnerable (3.0.0-1401.2)
	raring	Not vulnerable (3.0.0-1401.2)
	upstream	Released (2.6.33~rc1)

Severity score breakdown

Parameter	Value
Base score	5.5
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›