CVE-2012-0056 Privilege escalation in n/a

Medium 6.9 Published Updated

Local attackers can escalate privileges by exploiting improper permission checks in the Linux kernel's mem_write function when ASLR is disabled.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2012-0056?

CVE-2012-0056 is a medium-severity vulnerability in Linux kernel, published on 27 Jan 2012. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.

Weakness: CWE-264

Which versions are affected by CVE-2012-0056?

It affects 1 product.

Linux distribution packages (40)
kernel Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
kernel-debug Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
kernel-debug-debuginfo Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
kernel-debug-devel Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
kernel-debuginfo Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
kernel-debuginfo-common-i686 Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
kernel-debuginfo-common-x86_64 Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
kernel-devel Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
kernel-doc Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
kernel-firmware Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
kernel-headers Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
perf Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
perf-debuginfo Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
python-perf Red Hat:enterprise_linux:6::clientAll versions0:2.6.32-220.4.1.el6
kernel Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
kernel-debug Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
kernel-debug-debuginfo Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
kernel-debug-devel Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
kernel-debuginfo Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
kernel-debuginfo-common-x86_64 Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
kernel-devel Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
kernel-doc Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
kernel-firmware Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
kernel-headers Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
perf Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
perf-debuginfo Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
python-perf Red Hat:enterprise_linux:6::computenodeAll versions0:2.6.32-220.4.1.el6
kernel Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6
kernel-bootwrapper Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6
kernel-debug Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6
kernel-debug-debuginfo Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6
kernel-debug-devel Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6
kernel-debuginfo Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6
kernel-debuginfo-common-i686 Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6
kernel-debuginfo-common-ppc64 Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6
kernel-debuginfo-common-s390x Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6
kernel-debuginfo-common-x86_64 Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6
kernel-devel Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6
kernel-doc Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6
kernel-firmware Red Hat:enterprise_linux:6::serverAll versions0:2.6.32-220.4.1.el6

Products include Linux kernel.

How do I fix CVE-2012-0056?

Apply the vendor's patch.

Is CVE-2012-0056 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2012-0056 exists.

Public exploit code: 2 Exploit-DB entries and 2 proofs of concept on GitHub.

All Linux kernel vulnerabilities

Sources

Also known as GHSA-h6ww-x4xv-2vj2, RHSA-2012:0052, RHSA-2012:0061.

Is CVE-2012-0056 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free