CVE-2012-0028

high
Published 2012-06-21 · Modified 2026-04-29
CVSS v3
CVSS v2
7.2
VIR risk
7.2

Description

The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — https://github.com/torvalds/linux/commit/8141c7f3e7aee618312fa1c15109e1219de784a7

OS impact

OSVersionStatusFixed in
linux linux-kernelaffected
linux linux-kernel2.6.27affected
linux linux-kernel2.6.27.1affected
linux linux-kernel2.6.27.2affected
linux linux-kernel2.6.27.3affected
linux linux-kernel2.6.27.4affected
linux linux-kernel2.6.27.5affected
linux linux-kernel2.6.27.6affected
linux linux-kernel2.6.27.7affected
linux linux-kernel2.6.27.8affected
linux linux-kernel2.6.27.9affected
linux linux-kernel2.6.27.10affected
linux linux-kernel2.6.27.11affected
linux linux-kernel2.6.27.12affected
linux linux-kernel2.6.27.13affected
linux linux-kernel2.6.27.14affected
linux linux-kernel2.6.27.15affected
linux linux-kernel2.6.27.16affected
linux linux-kernel2.6.27.17affected
linux linux-kernel2.6.27.18affected
linux linux-kernel2.6.27.19affected
linux linux-kernel2.6.27.20affected
linux linux-kernel2.6.27.21affected
linux linux-kernel2.6.27.22affected
linux linux-kernel2.6.27.23affected
linux linux-kernel2.6.27.24affected
linux linux-kernel2.6.27.25affected
linux linux-kernel2.6.27.26affected
linux linux-kernel2.6.27.27affected
linux linux-kernel2.6.27.28affected
linux linux-kernel2.6.27.29affected
linux linux-kernel2.6.27.30affected
linux linux-kernel2.6.27.31affected
linux linux-kernel2.6.27.32affected
linux linux-kernel2.6.27.33affected
linux linux-kernel2.6.27.34affected
linux linux-kernel2.6.27.35affected
linux linux-kernel2.6.27.36affected
linux linux-kernel2.6.27.37affected
linux linux-kernel2.6.27.38affected
linux linux-kernel2.6.27.39affected
linux linux-kernel2.6.27.40affected
linux linux-kernel2.6.27.41affected
linux linux-kernel2.6.27.42affected
linux linux-kernel2.6.27.43affected
linux linux-kernel2.6.27.44affected
linux linux-kernel2.6.27.45affected
linux linux-kernel2.6.27.46affected
linux linux-kernel2.6.27.47affected
linux linux-kernel2.6.27.48affected
linux linux-kernel2.6.27.49affected
linux linux-kernel2.6.27.50affected
linux linux-kernel2.6.27.51affected
linux linux-kernel2.6.27.52affected
linux linux-kernel2.6.27.53affected
linux linux-kernel2.6.27.54affected
linux linux-kernel2.6.27.55affected
linux linux-kernel2.6.27.56affected
linux linux-kernel2.6.27.57affected
linux linux-kernel2.6.27.58affected
linux linux-kernel2.6.27.59affected
linux linux-kernel2.6.27.60affected
linux linux-kernel2.6.27.61affected

References

CWEs

CWE-264

Verify integrity in audit chain (admin only). AS-IS.