CVE-2012-1090

MediumCVSS 5.5/10Last modified Jun 16, 2026

Description

The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0481.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0531.htmlThird Party Advisory
http://secunia.com/advisories/48842Broken Link
http://secunia.com/advisories/48964Broken Link
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10Mailing List, Patch, Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/02/28/4Mailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=798293Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/88d7d4e4a439f32acc56a6d860e415ee71d3df08Patch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0481.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0531.htmlThird Party Advisory
http://secunia.com/advisories/48842Broken Link
http://secunia.com/advisories/48964Broken Link
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10Mailing List, Patch, Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/02/28/4Mailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=798293Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/88d7d4e4a439f32acc56a6d860e415ee71d3df08Patch, Third Party Advisory

Timeline

Published: May 17, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-10937.8The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation d CVE-2012-10947.5JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be m CVE-2012-10954.3osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log CVE-2012-10965.5NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file pat CVE-2012-10977.8The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which CVE-2012-10984.3Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote atta CVE-2012-10994.3Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails CVE-2012-11005.8Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account CVE-2012-11015.5systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure).CVE-2012-11027.5It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially unt CVE-2012-11034.3emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files CVE-2012-11045.3A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed.