CVE-2012-6638
The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24...
The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.
Exploit likelihood
What each source reports
NVD Score used
7.8
The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.
- Record
CVE-2012-6638- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-400
- Updated
- 2026-11-02
CVE List No score
The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.
- Record
CVE-2012-6638- Updated
- 2026-11-02
EUVDEUVD-2012-6484 No score
The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.
- Record
EUVD-2012-6484- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wq3v-5978-56ch No score
The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24...
The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.
- Record
GHSA-wq3v-5978-56ch- Weakness
- CWE-400
- Updated
- 2026-11-02
OSVBELL-CVE-2012-6638
7.8
CVE-2012-6638 does not affect BellSoft software
- Record
BELL-CVE-2012-6638- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
OSV No score
The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.
- Record
CVE-2012-6638- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-6638 No score
The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.
- Record
DEBIAN-CVE-2012-6638- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-6638 No score
The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.
- Record
UBUNTU-CVE-2012-6638- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.2.29-1 | 3.2.29-1 |
linuxDebian:13 |
before 3.2.29-1 | 3.2.29-1 |
linuxDebian:14 |
before 3.2.29-1 | 3.2.29-1 |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
Show 44 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-headersRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-headersRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.18-371.8.1.el5 | 0:2.6.18-371.8.1.el5 |
kernelRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-PAERed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-PAE-debuginfoRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-PAE-develRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-debugRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-debug-debuginfoRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-debug-develRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-debuginfoRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-debuginfo-commonRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-develRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-docRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-headersRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-kdumpRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-kdump-debuginfoRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-kdump-develRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-xenRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-xen-debuginfoRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
kernel-xen-develRed Hat:rhel_eus:5.9 From an advisory covering 3 CVEs |
before 0:2.6.18-348.27.1.el5 | 0:2.6.18-348.27.1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-6638 is a high vulnerability (CVSS 7.8) in Linux Kernel, published February 15, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.34%, the 88th percentile. Fixed in linux 3.2.29-1.
References
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.24
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdf5af0daf8019cec2396cdef8fb042d80fe71fa
github.com/torvalds/linux/commit/fdf5af0daf8019cec2396cdef8fb042d80fe71fa
bugzilla.redhat.com/show_bug.cgi?id=826702
nvd.nist.gov/vuln/detail/CVE-2012-6638
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=fdf5af0daf8019cec2396cdef8fb042d80fe71fa
Show 27 moreShow less
github.com/advisories/GHSA-wq3v-5978-56ch
docs.bell-sw.com/security/cves/CVE-2012-6638
security-tracker.debian.org/tracker/CVE-2012-6638
access.redhat.com/errata/RHSA-2014:0433
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1000451
bugzilla.redhat.com/show_bug.cgi?id=1066055
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0433.json
access.redhat.com/security/cve/CVE-2012-6638
cve.org/CVERecord?id=CVE-2012-6638
access.redhat.com/security/cve/CVE-2013-2888
cve.org/CVERecord?id=CVE-2013-2888
nvd.nist.gov/vuln/detail/CVE-2013-2888
access.redhat.com/errata/RHSA-2014:0772
bugzilla.redhat.com/show_bug.cgi?id=1094299
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0772.json
access.redhat.com/security/cve/CVE-2014-1737
cve.org/CVERecord?id=CVE-2014-1737
nvd.nist.gov/vuln/detail/CVE-2014-1737
access.redhat.com/security/cve/CVE-2014-1738
cve.org/CVERecord?id=CVE-2014-1738
nvd.nist.gov/vuln/detail/CVE-2014-1738
ubuntu.com/security/CVE-2012-6638
ubuntu.com/security/notices/USN-1529-1
ubuntu.com/security/notices/USN-1514-1
ubuntu.com/security/notices/USN-1651-1
ubuntu.com/security/notices/USN-1653-1