CVE-2012-2390
Published: 13 June 2012
Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory consumption or system crash) via invalid MAP_HUGETLB mmap operations.
From the Ubuntu security team
An error was discovered in the Linux kernel's memory subsystem (hugetlb). An unprivileged local user could exploit this flaw to cause a denial of service (crash the system).
Notes
| Author | Note |
|---|---|
| jdstrand | linux-armadaxp is maintained by OEM |
| henrix | as per https://lkml.org/lkml/2012/5/22/418 Hardy is not affected also, I couldn't reproduce this with test case http://marc.info/?l=linux-mm&m=133728900729735 |
Priority
Low
Status
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2390
- http://www.openwall.com/lists/oss-security/2012/05/23/14
- http://www.spinics.net/lists/linux-mm/msg34763.html
- https://ubuntu.com/security/notices/USN-1508-1
- https://ubuntu.com/security/notices/USN-1515-1
- https://ubuntu.com/security/notices/USN-1534-1
- https://ubuntu.com/security/notices/USN-1535-1
- https://ubuntu.com/security/notices/USN-1531-1
- https://ubuntu.com/security/notices/USN-1538-1
- https://ubuntu.com/security/notices/USN-1533-1
- https://ubuntu.com/security/notices/USN-1539-1
- NVD
- Launchpad
- Debian