Every CVE Search/ Get API key

CVE-2012-0957

The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local...

4.9 MediumPublic exploitFix available

The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.

Exploit likelihood

0.96%Down 2.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.9

The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.

Record
CVE-2012-0957
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:C/I:N/A:N
Weakness
CWE-16
Updated
2026-11-02
CVE List No score

The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.

Record
CVE-2012-0957
Updated
2026-11-02
EUVDEUVD-2012-0980 No score

The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.

Record
EUVD-2012-0980
Updated
2026-11-03
GitHub AdvisoriesGHSA-v32w-48qp-8cv8 No score

The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local...

The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.

Record
GHSA-v32w-48qp-8cv8
Updated
2026-11-02
OSVBELL-CVE-2012-0957 4.9

CVE-2012-0957 does not affect BellSoft software

Record
BELL-CVE-2012-0957
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:C/I:N/A:N
Updated
2026-11-02
OSV No score

The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.

Record
CVE-2012-0957
Updated
2026-11-02
OSVDEBIAN-CVE-2012-0957 No score

The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.

Record
DEBIAN-CVE-2012-0957
Updated
2026-11-02
OSVSUSE-SU-2015:0481-1 No score

Security update for Linux kernel

The SUSE Linux Enterprise 11 Service Pack 2 kernel was updated to fix a regression introduced by the previous update:

* scsi_dh_alua: Incorrect reference counting in the SCSI ALUA
  initialization code lead to system crashes on boot (bnc#858831).

As the update introducing the regression was marked security, this is also marked security even though this bug is not security relevant.

Record
SUSE-SU-2015:0481-1
Updated
2026-11-02
OSVUBUNTU-CVE-2012-0957 No score

The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.

Record
UBUNTU-CVE-2012-0957
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 3.2.32-1
3.2.32-1
linux
Debian:13
 before 3.2.32-1
3.2.32-1
linux
Debian:14
 before 3.2.32-1
3.2.32-1
kernel-rt
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-debug
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-debug-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-debug-devel
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-devel
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
Show 9 moreShow less
Affected packages
PackageAffectedFixed
kernel-rt-doc
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-firmware
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-trace
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-trace-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-trace-devel
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-vanilla
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-vanilla-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
kernel-rt-vanilla-devel
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt
mrg-rt-release
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.2.33-rt50.66.el6rt
0:3.2.33-rt50.66.el6rt

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBLinux Kernel 3.2.x - 'uname()' System Call Local Information Disclosure2012-10-09

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0957 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published October 10, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.96%, the 61st percentile. Fixed in linux 3.2.32-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 878 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open