NetSight
IP …
high7.2

CVE-2012-2136

The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local use…

Impact

The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.0.37
from 3.1 before 3.2.23
from 3.3 before 3.4.5

Weakness classification

CWE-20

References