CVE-2012-5374
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local...
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files whose names are associated with the same CRC32C hash value.
Exploit likelihood
What each source reports
NVD Score used
4.0
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files whose names are associated with the same CRC32C hash value.
- Record
CVE-2012-5374- CVSS 2.0
- 4.0 Medium
AV:L/AC:H/Au:N/C:N/I:N/A:C - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files whose names are associated with the same CRC32C hash value.
- Record
CVE-2012-5374- Updated
- 2026-11-02
EUVDEUVD-2012-5293 No score
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files whose names are associated with the same CRC32C hash value.
- Record
EUVD-2012-5293- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g474-2q34-4cpq No score
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local...
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files whose names are associated with the same CRC32C hash value.
- Record
GHSA-g474-2q34-4cpq- Updated
- 2026-11-02
OSVBELL-CVE-2012-5374
4.0
CVE-2012-5374 does not affect BellSoft software
- Record
BELL-CVE-2012-5374- CVSS 2.0
- 4.0 Medium
AV:L/AC:H/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
OSV No score
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files whose names are associated with the same CRC32C hash value.
- Record
CVE-2012-5374- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-5374 No score
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files whose names are associated with the same CRC32C hash value.
- Record
DEBIAN-CVE-2012-5374- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-5374 No score
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files whose names are associated with the same CRC32C hash value.
- Record
UBUNTU-CVE-2012-5374- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5374 is a medium vulnerability (CVSS 4.0) in Linux Kernel, published February 18, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in linux 3.8-1.
References
kernel.org/pub/linux/kernel/v3.x/testing/patch-3.8-rc1.bz2
crypto.junod.info/2012/12/13/hash-dos-and-btrfs
github.com/torvalds/linux/commit/9c52057c698fb96f8f07e7a4bcf4801a092bda89
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c52057c698fb96f8f07e7a4bcf4801a092bda89
lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html
ubuntu.com/usn/USN-1944-1
Show 18 moreShow less
ubuntu.com/usn/USN-1945-1
ubuntu.com/usn/USN-2017-1
ubuntu.com/usn/USN-1947-1
openwall.com/lists/oss-security/2012/12/13/20
ubuntu.com/usn/USN-1946-1
nvd.nist.gov/vuln/detail/CVE-2012-5374
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9c52057c698fb96f8f07e7a4bcf4801a092bda89
github.com/advisories/GHSA-g474-2q34-4cpq
docs.bell-sw.com/security/cves/CVE-2012-5374
security-tracker.debian.org/tracker/CVE-2012-5374
ubuntu.com/security/CVE-2012-5374
ubuntu.com/security/notices/USN-1944-1
ubuntu.com/security/notices/USN-1945-1
ubuntu.com/security/notices/USN-1947-1
ubuntu.com/security/notices/USN-1946-1
ubuntu.com/security/notices/USN-2017-1
ubuntu.com/security/notices/USN-2018-1
cve.org/CVERecord?id=CVE-2012-5374