CVE-2012-2390

2012-06-1300:00:00

ubuntu.com

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS

Percentile

5.1%

JSON

Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local
users to cause a denial of service (memory consumption or system crash) via
invalid MAP_HUGETLB mmap operations.

Bugs

Notes

Author	Note
jdstrand	linux-armadaxp is maintained by OEM
henrix	as per https://lkml.org/lkml/2012/5/22/418 Hardy is not affected also, I couldn’t reproduce this with test case http://marc.info/?l=linux-mm&m=133728900729735

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlinux< 2.6.32-42.95UNKNOWN
ubuntu11.04noarchlinux< 2.6.38-15.65UNKNOWN
ubuntu11.10noarchlinux< 3.0.0-23.37UNKNOWN
ubuntu12.04noarchlinux< 3.2.0-27.43UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1605.8UNKNOWN
ubuntu10.04noarchlinux-ec2< 2.6.32-347.52UNKNOWN
ubuntu10.04noarchlinux-lts-backport-natty< 2.6.38-15.65~lucid1UNKNOWN
ubuntu10.04noarchlinux-lts-backport-oneiric< 3.0.0-23.37~lucid1UNKNOWN
ubuntu12.04noarchlinux-ti-omap4< 3.2.0-1416.22UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	linux	< 2.6.32-42.95	UNKNOWN
ubuntu	11.04	noarch	linux	< 2.6.38-15.65	UNKNOWN
ubuntu	11.10	noarch	linux	< 3.0.0-23.37	UNKNOWN
ubuntu	12.04	noarch	linux	< 3.2.0-27.43	UNKNOWN
ubuntu	12.04	noarch	linux-armadaxp	< 3.2.0-1605.8	UNKNOWN
ubuntu	10.04	noarch	linux-ec2	< 2.6.32-347.52	UNKNOWN
ubuntu	10.04	noarch	linux-lts-backport-natty	< 2.6.38-15.65~lucid1	UNKNOWN
ubuntu	10.04	noarch	linux-lts-backport-oneiric	< 3.0.0-23.37~lucid1	UNKNOWN
ubuntu	12.04	noarch	linux-ti-omap4	< 3.2.0-1416.22	UNKNOWN