CVE-2012-2372

Published: 18 June 2012

The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG_ON and kernel panic) by establishing an RDS connection with the source IP address equal to the IPoIB interface's own IP address, as demonstrated by rds-ping.

From the Ubuntu security team

A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. A local, unprivileged user could use this flaw to cause a denial of service.

Status

Notes

linux-armadaxp is maintained by OEM

this is claimed fixed by RedHat but I cannot find the fix anywhere, the
only reference I did find to the CVE in Fedora implies they have miss
tagged the fix for CVE-2012-2373 as 2372:
http://permalink.gmane.org/gmane.linux.redhat.fedora.extras.cvs/775892
note the patch is the x86 pmd patch.
needs-triage back to -security for lack of a clear direction on a fix (per
irc discussions)
Looking at the RHEL kernels it appears that this is the fix, though it
is not upstream as yet:
http://people.canonical.com/~apw/misc/cves/CVE-2012-2372-1.diff

https://oss.oracle.com/git/?p=redpatch.git;a=commitdiff;h=c7b6a0a1d8d636852be130fa15fa8be10d4704e8
seems fixed upstream by 18fc25c94eadc52a42c025125af24657a93638c0

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2372
• https://rhn.redhat.com/errata/RHSA-2012-0743.html
• https://ubuntu.com/security/notices/USN-1529-1
• https://ubuntu.com/security/notices/USN-1530-1
• https://ubuntu.com/security/notices/USN-1531-1
• https://ubuntu.com/security/notices/USN-1514-1
• https://ubuntu.com/security/notices/USN-1538-1
• https://ubuntu.com/security/notices/USN-1554-1
• https://ubuntu.com/security/notices/USN-1555-1
• https://ubuntu.com/security/notices/USN-1556-1
• https://ubuntu.com/security/notices/USN-1558-1
• https://ubuntu.com/security/notices/USN-1563-1
• NVD
• Launchpad
• Debian