{"id":"CVE-2012-0028","aliases":["EUVD-2012-0068","GHSA-9qx9-h259-89mm","RHSA-2012:0107","RHSA-2012:0358"],"status":"published","title":"The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle...","description":"The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00499,"percentile":0.43049,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2012-06-21T23:00:00Z","modified":"2026-06-28T10:05:52Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-PAE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-PAE-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-PAE-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-xen-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-xen-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-PAE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-PAE-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-PAE-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-xen-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-xen-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.18.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-PAE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-PAE-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-PAE-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-xen-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.6","package":"kernel-xen-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.35.1.el5"}]}],"bundled":5}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=771764","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.openwall.com/lists/oss-security/2012/05/08/1","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://github.com/torvalds/linux/commit/8141c7f3e7aee618312fa1c15109e1219de784a7","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8141c7f3e7aee618312fa1c15109e1219de784a7","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0028","tags":["advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8141c7f3e7aee618312fa1c15109e1219de784a7"},{"url":"https://github.com/advisories/GHSA-9qx9-h259-89mm"},{"url":"https://access.redhat.com/errata/RHSA-2012:0107","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/kb/docs/DOC-67874","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=747942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=749143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=752375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=772867","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0107.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3638","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4086","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4086","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4086","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4127","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4127","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0028","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0028","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0207","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0358","tags":["advisory"]},{"url":"https://access.redhat.com/knowledge/articles/66747","tags":["article"]},{"url":"https://access.redhat.com/knowledge/articles/67869","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=715555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723429","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=755431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=784658","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0358.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-1898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1898","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2699","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2699","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2699","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4330","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4330","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4330","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-0028","description":"The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.","status":"published","published":"2012-06-21T23:00:00Z","modified":"2024-08-06T18:09:17.251Z","updated_at":"2026-11-02T14:34:52.638543Z"}],"euvd":[{"id":"EUVD-2012-0068","description":"The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.","status":"published","published":"2012-06-21T23:00:00Z","modified":"2024-08-06T18:09:17Z","updated_at":"2026-11-03T01:56:23.098352Z"}],"ghsa":[{"id":"GHSA-9qx9-h259-89mm","title":"The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle...","description":"The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.","status":"published","published":"2022-05-04T00:27:43Z","modified":"2023-02-13T03:30:23Z","updated_at":"2026-11-02T14:54:05.462623Z"}],"nvd":[{"id":"CVE-2012-0028","description":"The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.","status":"published","published":"2012-06-21T23:55:02.52Z","modified":"2026-06-16T23:36:31.5Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:14.336529Z"}],"osv":[{"id":"RHSA-2012:0107","title":"Red Hat Security Advisory: kernel security and bug fix update","status":"published","published":"2024-09-15T19:40:12Z","modified":"2026-06-28T10:05:45Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:0358","title":"Red Hat Security Advisory: kernel security and bug fix update","status":"published","published":"2024-09-15T19:40:17Z","modified":"2026-06-28T10:05:52Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}