CVE-2012-1097: Null Pointer Dereference
Last updated 24 July 2024
Other sources
The regset (aka register set) feature in the Linux kernel before 3.2.1 ...
— Debian
The regset common infrastructure assumed that regsets would always have .get and .set methods, but not necessarily .active methods. Unfortunately people have since written regsets without .set methods.
Rather than putting in stub functions everywhere, handle regsets with null .get or .set methods explicitly.
Acknowledgements:
Red Hat would like to thank H. Peter Anvin for reporting this issue.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1097?
CVE-2012-1097 has a moderate severity rating due to its potential to cause denial of service.
How do I fix CVE-2012-1097?
To mitigate CVE-2012-1097, upgrade to a fixed version of the Linux kernel, specifically 3.2.10 or later.
What software is affected by CVE-2012-1097?
CVE-2012-1097 affects several versions of the Linux kernel, specifically those prior to 3.2.10.
Can CVE-2012-1097 lead to remote exploitation?
CVE-2012-1097 primarily allows local users to cause denial of service, not remote exploitation.
Is CVE-2012-1097 a zero-day vulnerability?
CVE-2012-1097 was publicly disclosed and has known fixes, so it is not classified as a zero-day vulnerability.