CVE-2012-5517
The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local...
The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact in opportunistic circumstances by using memory that was hot-added by an administrator.
Exploit likelihood
What each source reports
NVD Score used
4.0
The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact in opportunistic circumstances by using memory that was hot-added by an administrator.
- Record
CVE-2012-5517- CVSS 2.0
- 4.0 Medium
AV:L/AC:H/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact in opportunistic circumstances by using memory that was hot-added by an administrator.
- Record
CVE-2012-5517- Updated
- 2026-11-02
EUVDEUVD-2012-5409 No score
The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact in opportunistic circumstances by using memory that was hot-added by an administrator.
- Record
EUVD-2012-5409- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6v57-gq9p-2vjv No score
The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local...
The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact in opportunistic circumstances by using memory that was hot-added by an administrator.
- Record
GHSA-6v57-gq9p-2vjv- Updated
- 2026-11-02
OSV No score
The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact in opportunistic circumstances by using memory that was hot-added by an administrator.
- Record
CVE-2012-5517- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-5517 No score
The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact in opportunistic circumstances by using memory that was hot-added by an administrator.
- Record
DEBIAN-CVE-2012-5517- Updated
- 2026-11-02
OSVSUSE-SU-2015:0481-1 No score
Security update for Linux kernel
The SUSE Linux Enterprise 11 Service Pack 2 kernel was updated to fix a regression introduced by the previous update:
* scsi_dh_alua: Incorrect reference counting in the SCSI ALUA
initialization code lead to system crashes on boot (bnc#858831).
As the update introducing the regression was marked security, this is also marked security even though this bug is not security relevant.
- Record
SUSE-SU-2015:0481-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-5517 No score
The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact in opportunistic circumstances by using memory that was hot-added by an administrator.
- Record
UBUNTU-CVE-2012-5517- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.2.41-1 | 3.2.41-1 |
linuxDebian:13 |
before 3.2.41-1 | 3.2.41-1 |
linuxDebian:14 |
before 3.2.41-1 | 3.2.41-1 |
kernelRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
Show 58 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-docRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perfRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perfRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernelRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perfRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perfRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernelRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernelRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perfRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perfRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5517 is a medium vulnerability (CVSS 4.0) in Linux Kernel, published November 11, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 32nd percentile. Fixed in linux 3.2.41-1.
References
kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2
ubuntu.com/usn/USN-1679-1
rhn.redhat.com/errata/RHSA-2012-1580.html
kernel.org/pub/linux/kernel/v3.x
suse.com/support/update/announcement/2012/suse-su-20121679-1.html
ubuntu.com/usn/USN-1673-1
Show 194 moreShow less
github.com/torvalds/linux/commit/08dff7b7d629807dbb1f398c68dd9cd58dd657a1
openwall.com/lists/oss-security/2012/11/13/11
ubuntu.com/usn/USN-1678-1
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=08dff7b7d629807dbb1f398c68dd9cd58dd657a1
securityfocus.com/bid/56527
ubuntu.com/usn/USN-1671-1
lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
ubuntu.com/usn/USN-1677-1
bugzilla.redhat.com/show_bug.cgi?id=875374
nvd.nist.gov/vuln/detail/CVE-2012-5517
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=08dff7b7d629807dbb1f398c68dd9cd58dd657a1
github.com/advisories/GHSA-6v57-gq9p-2vjv
security-tracker.debian.org/tracker/CVE-2012-5517
access.redhat.com/errata/RHSA-2012:1580
access.redhat.com/security/updates/classification
access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.3_Technical_Notes/kernel.html
rhn.redhat.com/errata/RHSA-2012-0862.html
bugzilla.redhat.com/show_bug.cgi?id=809687
bugzilla.redhat.com/show_bug.cgi?id=822869
bugzilla.redhat.com/show_bug.cgi?id=871848
bugzilla.redhat.com/show_bug.cgi?id=874835
bugzilla.redhat.com/show_bug.cgi?id=876549
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1580.json
access.redhat.com/security/cve/CVE-2012-2100
cve.org/CVERecord?id=CVE-2012-2100
nvd.nist.gov/vuln/detail/CVE-2012-2100
access.redhat.com/security/cve/CVE-2012-2375
cve.org/CVERecord?id=CVE-2012-2375
nvd.nist.gov/vuln/detail/CVE-2012-2375
access.redhat.com/security/cve/CVE-2012-4444
cve.org/CVERecord?id=CVE-2012-4444
nvd.nist.gov/vuln/detail/CVE-2012-4444
access.redhat.com/security/cve/CVE-2012-4565
cve.org/CVERecord?id=CVE-2012-4565
nvd.nist.gov/vuln/detail/CVE-2012-4565
access.redhat.com/security/cve/CVE-2012-5517
cve.org/CVERecord?id=CVE-2012-5517
suse.com/support/update/announcement/2015/suse-su-20150481-1
bugzilla.suse.com/556135
bugzilla.suse.com/578046
bugzilla.suse.com/624072
bugzilla.suse.com/651219
bugzilla.suse.com/676204
bugzilla.suse.com/688996
bugzilla.suse.com/698102
bugzilla.suse.com/703156
bugzilla.suse.com/704280
bugzilla.suse.com/705551
bugzilla.suse.com/708296
bugzilla.suse.com/708836
bugzilla.suse.com/713148
bugzilla.suse.com/714604
bugzilla.suse.com/715635
bugzilla.suse.com/716850
bugzilla.suse.com/716971
bugzilla.suse.com/718521
bugzilla.suse.com/718863
bugzilla.suse.com/718910
bugzilla.suse.com/718918
bugzilla.suse.com/720946
bugzilla.suse.com/721587
bugzilla.suse.com/721857
bugzilla.suse.com/722398
bugzilla.suse.com/722560
bugzilla.suse.com/723776
bugzilla.suse.com/725152
bugzilla.suse.com/725355
bugzilla.suse.com/725592
bugzilla.suse.com/728840
bugzilla.suse.com/729247
bugzilla.suse.com/729854
bugzilla.suse.com/730117
bugzilla.suse.com/730118
bugzilla.suse.com/730660
bugzilla.suse.com/731035
bugzilla.suse.com/731387
bugzilla.suse.com/731739
bugzilla.suse.com/732070
bugzilla.suse.com/732296
bugzilla.suse.com/732908
bugzilla.suse.com/733761
bugzilla.suse.com/734900
bugzilla.suse.com/735909
bugzilla.suse.com/736149
bugzilla.suse.com/736255
bugzilla.suse.com/736697
bugzilla.suse.com/738210
bugzilla.suse.com/738284
bugzilla.suse.com/738528
bugzilla.suse.com/738583
bugzilla.suse.com/738597
bugzilla.suse.com/738644
bugzilla.suse.com/738679
bugzilla.suse.com/739728
bugzilla.suse.com/739837
bugzilla.suse.com/740180
bugzilla.suse.com/740291
bugzilla.suse.com/741814
bugzilla.suse.com/741824
bugzilla.suse.com/742845
bugzilla.suse.com/742871
bugzilla.suse.com/743232
bugzilla.suse.com/743579
bugzilla.suse.com/744198
bugzilla.suse.com/744314
bugzilla.suse.com/744315
bugzilla.suse.com/744392
bugzilla.suse.com/744404
bugzilla.suse.com/744655
bugzilla.suse.com/744658
bugzilla.suse.com/744692
suse.com/security/cve/CVE-2011-1083
suse.com/security/cve/CVE-2011-2494
suse.com/security/cve/CVE-2011-4086
suse.com/security/cve/CVE-2011-4127
suse.com/security/cve/CVE-2011-4131
suse.com/security/cve/CVE-2011-4132
suse.com/security/cve/CVE-2012-0957
suse.com/security/cve/CVE-2012-1097
suse.com/security/cve/CVE-2012-1146
suse.com/security/cve/CVE-2012-1179
suse.com/security/cve/CVE-2012-1601
suse.com/security/cve/CVE-2012-2119
suse.com/security/cve/CVE-2012-2127
suse.com/security/cve/CVE-2012-2133
suse.com/security/cve/CVE-2012-2136
suse.com/security/cve/CVE-2012-2137
suse.com/security/cve/CVE-2012-2313
suse.com/security/cve/CVE-2012-2319
suse.com/security/cve/CVE-2012-2372
suse.com/security/cve/CVE-2012-2373
suse.com/security/cve/CVE-2012-2375
suse.com/security/cve/CVE-2012-2390
suse.com/security/cve/CVE-2012-2745
suse.com/security/cve/CVE-2012-3375
suse.com/security/cve/CVE-2012-3400
suse.com/security/cve/CVE-2012-3412
suse.com/security/cve/CVE-2012-3430
suse.com/security/cve/CVE-2012-4398
suse.com/security/cve/CVE-2012-4461
suse.com/security/cve/CVE-2012-4508
suse.com/security/cve/CVE-2012-4530
suse.com/security/cve/CVE-2012-4565
suse.com/security/cve/CVE-2012-5517
suse.com/security/cve/CVE-2012-6548
suse.com/security/cve/CVE-2012-6549
suse.com/security/cve/CVE-2013-0160
suse.com/security/cve/CVE-2013-0216
suse.com/security/cve/CVE-2013-0231
suse.com/security/cve/CVE-2013-0268
suse.com/security/cve/CVE-2013-0311
suse.com/security/cve/CVE-2013-0349
suse.com/security/cve/CVE-2013-0871
suse.com/security/cve/CVE-2013-0913
suse.com/security/cve/CVE-2013-0914
suse.com/security/cve/CVE-2013-1059
suse.com/security/cve/CVE-2013-1767
suse.com/security/cve/CVE-2013-1772
suse.com/security/cve/CVE-2013-1774
suse.com/security/cve/CVE-2013-1792
suse.com/security/cve/CVE-2013-1796
suse.com/security/cve/CVE-2013-1797
suse.com/security/cve/CVE-2013-1798
suse.com/security/cve/CVE-2013-1819
suse.com/security/cve/CVE-2013-1848
suse.com/security/cve/CVE-2013-1860
suse.com/security/cve/CVE-2013-1929
suse.com/security/cve/CVE-2013-1979
suse.com/security/cve/CVE-2013-2094
suse.com/security/cve/CVE-2013-2148
suse.com/security/cve/CVE-2013-2164
suse.com/security/cve/CVE-2013-2206
suse.com/security/cve/CVE-2013-2232
suse.com/security/cve/CVE-2013-2234
suse.com/security/cve/CVE-2013-2237
suse.com/security/cve/CVE-2013-2634
suse.com/security/cve/CVE-2013-2635
suse.com/security/cve/CVE-2013-2850
suse.com/security/cve/CVE-2013-2851
suse.com/security/cve/CVE-2013-2893
suse.com/security/cve/CVE-2013-2897
suse.com/security/cve/CVE-2013-2899
suse.com/security/cve/CVE-2013-2929
ubuntu.com/security/CVE-2012-5517
openwall.com/lists/oss-security/2012/11/10/11
openwall.com/lists/oss-security/2012/11/11
ubuntu.com/security/notices/USN-1669-1
ubuntu.com/security/notices/USN-1670-1
ubuntu.com/security/notices/USN-1671-1
ubuntu.com/security/notices/USN-1673-1
ubuntu.com/security/notices/USN-1677-1
ubuntu.com/security/notices/USN-1678-1
ubuntu.com/security/notices/USN-1679-1
ubuntu.com/security/notices/USN-1704-1
Left out here: 865 references. The JSON record has them.