CVE-2012-0028: High severity Linux Linux kernel vulnerability
Last updated 24 July 2024
Other sources
Move "exitrobustlist" into mmrelease() and clear them
We don't want to get rid of the futexes just at exit() time, we want to drop them when doing an execve() too, since that gets rid of the previous VM image too.
Doing it at mmrelease() time means that we automatically always do it when we disassociate a VM map from the task.
Upstream patches: 8141c7f3e7aee618312fa1c15109e1219de784a7 fc6b177dee33365ccb29fe6d2092223cf8d679f9
— Red Hat
The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0028?
CVE-2012-0028 has been classified as having a moderate severity level.
How do I fix CVE-2012-0028?
To fix CVE-2012-0028, update the Linux kernel to a version greater than 2.6.27.61.
What systems are affected by CVE-2012-0028?
CVE-2012-0028 affects certain versions of the Linux kernel, specifically those up to 2.6.27.61.
Is CVE-2012-0028 exploitable remotely?
CVE-2012-0028 is not considered to be exploitable remotely and requires local access.
What types of vulnerabilities does CVE-2012-0028 address?
CVE-2012-0028 addresses vulnerabilities related to memory handling in the Linux kernel.