CVE-2012-4565: Divide by Zero
Last updated 24 July 2024
Other sources
Reading TCP stats when using TCP Illinois congestion control algorithm can cause a divide by zero kernel oops.
An unprivileged local user could use this flaw to crash the system.
Proposed upstream patch: http://thread.gmane.org/gmane.linux.network/247871
Acknowledgements:
This issue was discovered by Rodrigo Freire of Red Hat.
— Red Hat
The tcpillinoisinfo function in net/ipv4/tcpillinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcpcongestioncontrol illinois setting is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) by reading TCP stats.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4565?
CVE-2012-4565 is classified as a high severity vulnerability due to its potential for system crashes by unprivileged local users.
How do I fix CVE-2012-4565?
To fix CVE-2012-4565, upgrade your Linux kernel to a version that is 5.10.223-1 or higher, or 6.1.119-1 or higher.
Who is affected by CVE-2012-4565?
CVE-2012-4565 affects users running the Linux kernel versions up to 3.4.18.
What kind of flaw is CVE-2012-4565?
CVE-2012-4565 is a divide by zero vulnerability in the TCP Illinois congestion control algorithm.
Can CVE-2012-4565 be exploited remotely?
CVE-2012-4565 cannot be exploited remotely as it requires local user access to trigger the flaw.