CVE-2012-2123: High severity linux kernel vulnerability
Last updated 24 July 2024
Other sources
The capbprmsetcreds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2123?
CVE-2012-2123 is classified as a medium severity vulnerability allowing local users to bypass intended restrictions.
How do I fix CVE-2012-2123?
To fix CVE-2012-2123, it is recommended to update the Linux kernel to version 3.3.3 or later.
What systems are affected by CVE-2012-2123?
CVE-2012-2123 affects Linux kernels prior to version 3.3.3, including versions 3.0.x and 3.2.x.
What is the main issue with CVE-2012-2123?
The main issue with CVE-2012-2123 is improper handling of file system capabilities in the cap_bprm_set_creds function.
Can CVE-2012-2123 lead to privilege escalation?
Yes, CVE-2012-2123 can allow local users to escalate privileges by bypassing security restrictions.