CVE-2012-3511: Use After Free
A use-after-free flaw has been found in madviseremove() function in the Linux kernel. madviseremove() can race with munmap (causing a use-after-free of the vma) or with close (causing a use-after-free of the struct file). An unprivileged local user can use this flaw to crash the system and potentially gain higher privileges.
Upstream fix: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=9ab4233dd08036fe34a89c7dc6f47a8bf2eb29eb
Introduced in: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=90ed52ebe48181d3c5427b3bd1d24f659e7575ad
Other sources
Multiple race conditions in the madviseremove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local users to cause a denial of service (use-after-free and system crash) via vectors involving a (1) munmap or (2) close system call.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2012-3511?
CVE-2012-3511 is classified as a high-severity vulnerability, as it allows unprivileged local users to crash the system.
How do I fix CVE-2012-3511?
To remediate CVE-2012-3511, update the kernel package to a version that is not vulnerable, such as 0:2.6.18-348.18.1.el5 or 0:2.6.32-279.14.1.el6.
Which systems are affected by CVE-2012-3511?
CVE-2012-3511 affects various versions of the Linux kernel, including specific versions of Red Hat and Debian's kernel packages.
Can CVE-2012-3511 be exploited remotely?
No, CVE-2012-3511 requires local access, meaning an unprivileged user must be physically present on the machine to exploit the vulnerability.
What kind of impact can CVE-2012-3511 have on my system?
Exploitation of CVE-2012-3511 can lead to system crashes and potential denial of service, adversely affecting system stability.