CVE-2012-0056
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly...
6.9 MediumPublic exploitFix available
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
Exploit likelihood
10.8%Up 7.0 points since Feb 4, 2022
What each source reports
NVD Score used
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
- Record
CVE-2012-0056- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
- Record
CVE-2012-0056- Updated
- 2026-11-02
EUVDEUVD-2012-0094 No score
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
- Record
EUVD-2012-0094- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h6ww-x4xv-2vj2 No score
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly...
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
- Record
GHSA-h6ww-x4xv-2vj2- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10128-1 No score
kernel-debug-4.8.13-1.1 on GA media
These are all security issues fixed in the kernel-debug-4.8.13-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10128-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-0056 No score
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
- Record
UBUNTU-CVE-2012-0056- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-develRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-docRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
Show 67 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-headersRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
perfRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
python-perfRed Hat:enterprise_linux:6::client |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernelRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
perfRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
python-perfRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernelRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
python-perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernelRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
perfRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
python-perfRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-220.4.1.el6 | 0:2.6.32-220.4.1.el6 |
kernel-rtRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-debugRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-debuginfo-common-x86_64Red Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-develRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-docRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-firmwareRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-traceRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:2:server:el6 |
before 0:3.0.9-rt26.46.el6rt | 0:3.0.9-rt26.46.el6rt |
kernel-sourceopenSUSE:Tumbleweed From an advisory covering 82 CVEs |
before 4.8.13-1.1 | 4.8.13-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6.39 < 3.2.2 (x86/x64) - 'Mempodipper' Local Privilege Escalation (2) | 2012-01-12 |
| Exploit-DB | Linux Kernel 2.6.39 < 3.2.2 (Gentoo / Ubuntu x86/x64) - 'Mempodipper' Local Privilege Escalation (1) | 2012-01-23 |
| PoC in GitHub | srclib/CVE-2012-0056 | 2012-12-29 |
| PoC in GitHub | pythonone/CVE-2012-0056 | 2016-07-22 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-0056 is a medium vulnerability (CVSS 6.9) in Linux Kernel, published January 19, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.8%, the 95th percentile. Fixed in kernel 0:2.6.32-220.4.1.el6.
References
securityfocus.com/bid/51625
blog.zx2c4.com/749
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=e268337dfe26dfc7efd422a804dbb27977a3cccc
ubuntu.com/usn/usn-1336-1
redhat.com/support/errata/RHSA-2012-0052.html
secunia.com/advisories/47708
Show 105 moreShow less
openwall.com/lists/oss-security/2012/01/19/4
bugzilla.redhat.com/show_bug.cgi?id=782642
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2
kb.cert.org/vuls/id/470151
nvd.nist.gov/vuln/detail/CVE-2012-0056
access.redhat.com/errata/RHSA-2012:0052
github.com/advisories/GHSA-h6ww-x4xv-2vj2
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0052.json
cve.org/CVERecord?id=CVE-2012-0056
suse.com/security/cve/CVE-2009-3939