Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.6

Linux kernel can let local user read memory or crash

CVE-2012-3510 · published 14 years ago
Summary

A coding mistake in older Linux kernels (before version 2.6.19) lets anyone with local access ask the system for task statistics and cause the kernel to use memory that has already been released. This can expose private data stored in the kernel or make the system crash. Updating the operating system to a newer kernel version fixes the issue.

What to do
  • Update debian linux to version 2.6.20-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian linux < 2.6.20-1
Fix: upgrade to 2.6.20-1
Debian:13 debian linux < 2.6.20-1
Fix: upgrade to 2.6.20-1
Debian:14 debian linux < 2.6.20-1
Fix: upgrade to 2.6.20-1
– linux linux_kernel <= 2.6.18.8
2.6.10
2.6.11
2.6.11.1
2.6.11.2
2.6.11.3
2.6.11.4
2.6.11.5
2.6.11.6
2.6.11.7
2.6.11.8
2.6.11.9
122 more version ranges
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Original advisory text
Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or ...
Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or cause a denial of service (system crash) via a taskstats TASKSTATS_CMD_ATTR_PID command.
References
Severity
5.6 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published3 Oct 2012
Updated4 Nov 2026
First seen5 Sep 2026
Sources
DEBIAN-CVE-2012-3510 · OSV
CVE-2012-3510 · NVD
Track software like this
Free during beta