CVE-2012-2136

Description

The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	linux	3.2.20-1	—
Debian 13	linux	3.2.20-1	—
Debian 12	linux	3.2.20-1	—

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 6	perf +15	2.6.32-220.23.1.el6	RHSA-2012:0743
RHEL 5	kernel +12	2.6.18-308.8.1.el5	RHSA-2012:0690

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
RHEL 5.6 EUS	kernel +12	2.6.18-238.40.1.el5	RHSA-2012:1087

Advisories 3

RHSA-2012:1087 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
RHSA-2012:0743 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
RHSA-2012:0690 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026

References

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5
RHSA-2012:0743 vendor-advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc
53721 vdb-entry
https://github.com/torvalds/linux/commit/cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc
USN-1535-1 vendor-advisory
USN-1529-1 vendor-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=816289
RHSA-2012:1087 vendor-advisory
50807 third-party-advisory