Description
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +15 | 2.6.32-220.4.1.el6 | RHSA-2012:0052 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 2 | kernel-rt +10 | 3.0.9-rt26.46.el6rt | RHSA-2012:0061 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-source | 4.8.13-1.1 | openSUSE-SU-2024:10128-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 2
- Linux Kernel 2.6.39 < 3.2.2 (Gentoo / Ubuntu x86/x64) - 'Mempodipper' Local Privilege Escalation (1) EDB-18411 · local · Jan 23, 2012 · verified
- Linux Kernel 2.6.39 < 3.2.2 (x86/x64) - 'Mempodipper' Local Privilege Escalation (2) EDB-35161 · local · Jan 12, 2012 · verified
GitHub 2 repositories
-
pythonone/CVE-2012-0056 ★ 1 · Jul 22, 2016
linux 提权
-
srclib/CVE-2012-0056 ★ 1 · Dec 29, 2012
Mempodipper, a linux local root exploit.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 3
- RHSA-2012:0052 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:10128-1 kernel-debug-4.8.13-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2012:0061 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- 51625 vdb-entry
- http://blog.zx2c4.com/749
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=e268337dfe26dfc7efd422a804dbb27977a3cccc
- USN-1336-1 vendor-advisory
- RHSA-2012:0052 vendor-advisory
- 47708 third-party-advisory
- [oss-security] 20120119 Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling mailing-list
- [oss-security] 20120117 Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling mailing-list
- RHSA-2012:0061 vendor-advisory
- [oss-security] 20120118 CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling mailing-list
- [oss-security] 20120122 Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=782642
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2
- VU#470151 third-party-advisory