CVE-2012-2373 Information

Description

The Linux kernel before 3.4.5 on the x86 platform when Physical Address Extension (PAE) is enabled does not properly use the Page Middle Directory (PMD) which allows local users to cause a denial of service (panic) via a crafted application that triggers a race condition.

Reference

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=26c191788f18129af0eb32a358cdaea0c7479626 http://marc.info/?l=bugtraq&m=139447903326211&w=2 http://rhn.redhat.com/errata/RHSA-2012-0743.html http://ubuntu.com/usn/usn-1529-1 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5 http://www.openwall.com/lists/oss-security/2012/05/18/11 https://bugzilla.redhat.com/show_bug.cgi?id=822821 https://github.com/torvalds/linux/commit/26c191788f18129af0eb32a358cdaea0c7479626

Share on: