CVE-2012-2136: Buffer Overflow
Datalen paremeter of sockallocsendpskb() function is not validated before setting frags of allocated skb, which can lead to heap overflow.
On Red Hat Enterprise Linux 5 a user having access to TUN/TAP virtual device could use this flaw to crash the system or to potentially escalate their privileges. The resulting CVSS score is 6.2.
On Red Hat Enterprise Linux 6 a privileged guest user could use this flaw to crash the host or to potentially escalate their privileges on the host. The resulting CVSS score is 7.4.
Other sources
The sockallocsendpskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2136?
CVE-2012-2136 is considered a high severity vulnerability due to the potential for heap overflow and system crash.
How do I fix CVE-2012-2136?
To mitigate CVE-2012-2136, update to a patched version of the Linux kernel, specifically versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
Who is affected by CVE-2012-2136?
CVE-2012-2136 primarily affects users of the TUN/TAP virtual device on affected versions of the Linux kernel.
Can CVE-2012-2136 lead to privilege escalation?
Yes, CVE-2012-2136 can potentially allow an attacker to escalate their privileges on the system.
What are the affected versions for CVE-2012-2136?
CVE-2012-2136 affects Linux kernel versions up to 3.0.37, from 3.1 to 3.2.23, and between 3.3 to 3.4.5.