CVE-2012-3552 Race condition in n/a
Remote attackers can cause a system crash via slab corruption in the Linux kernel IP implementation by exploiting a race condition during socket option handling.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-3552?
CVE-2012-3552 is a medium-severity vulnerability in Linux kernel, published on 3 Oct 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corruption and system crash) by sending packets to an application that sets socket options during the handling of network traffic.
Weakness: CWE-362
Which versions are affected by CVE-2012-3552?
It affects 2 products.
Products include Linux kernel, Redhat Enterprise Linux Eus.
How do I fix CVE-2012-3552?
Upgrade to a fixed version.
Is CVE-2012-3552 being exploited?
There is no known exploitation of CVE-2012-3552 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2012-3552, GHSA-745g-xcgm-mj62.