CVE-2012-1090: Input Validation
Last updated 24 July 2024
Other sources
The cifs code will attempt to open files on lookup under certain circumstances. What happens though if we find that the file we opened was actually a FIFO or other special file? Currently, the open filehandle just ends up being leaked leading to a dentry refcount mismatch and oops on umount.
An user with access to samba share could use this flaw to crash the systems of users that have access to the same samba share.
Introduced by: http://git.kernel.org/linus/a6ce4932fbdbcd8f8e8c6df76812014351c32892
Proposed upstream patch: http://thread.gmane.org/gmane.linux.kernel.cifs/5526
— Red Hat
The cifslookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1090?
CVE-2012-1090 is classified with a moderate severity level.
How do I fix CVE-2012-1090?
To fix CVE-2012-1090, update your kernel to the versions that include the patch as specified by your Linux distribution.
What is CVE-2012-1090 about?
CVE-2012-1090 involves a file handle leak in the CIFS code when a special file is opened.
Which versions are affected by CVE-2012-1090?
CVE-2012-1090 affects multiple Linux kernel versions prior to 3.2.10, particularly those based on kernel 2.6.32-220.
Is CVE-2012-1090 present in Red Hat Enterprise Linux?
Yes, CVE-2012-1090 impacts specific versions of the kernel on Red Hat Enterprise Linux.