CVE-2012-0810 — kernel-rt: stack corruption when task gets scheduled out using the debug stack

Back Back to CVE browser

MEDIUM

kernel-rt: stack corruption when task gets scheduled out using the debug stack

Published Feb 12, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.38%

Description

The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corruption and panic) via a crafted application that triggers certain lock contention.

Affected products

Vendor Linux Foundation Product Linux kernel Default
n/a
- Version
  before 3.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux Foundation

Linux kernel

n/a

Version	Status	Constraints
before 3.3	affected	-

Red Hat Enterprise MRG 2

kernel-rt-0:3.0.18-rt34.53.el6rt

Fixed · RHSA-2012:0333
Red Hat Enterprise Linux 4

kernel

Not affected
Red Hat Enterprise Linux 5

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected

Product	Package	State	Advisory
Red Hat Enterprise MRG 2	kernel-rt-0:3.0.18-rt34.53.el6rt	Fixed	RHSA-2012:0333
Red Hat Enterprise Linux 4	kernel	Not affected	n/a
Red Hat Enterprise Linux 5	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a

Remediation

Red Hat statement

This issue did not affect the Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and 6. This has been addressed in Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2012-0333.html.

Metrics

0.38% 0.00381

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00381

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.38% (0.00381)	29.71th	v5 (v2026.06.15)
Jun 15, 2026	0.38% (0.00381)	29.72th	v5 (v2026.06.15)
Mar 17, 2025	0.05% (0.00050)	12.73th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00890)	30.33th	v2 (v2022.01.01)
Feb 13, 2023	0.89% (0.00890)	29.93th	v2 (v2022.01.01)
Feb 3, 2023	0.95% (0.00950)	31.66th	v2 (v2022.01.01)
Sep 10, 2022	0.89% (0.00890)	28.64th	v2 (v2022.01.01)
Apr 1, 2022	0.89% (0.00890)	26.62th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00890)	12.04th	v2 (v2022.01.01)

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (6)

https://access.redhat.com/security/cve/CVE-2012-0810
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=794557
x_refsource_MISCIssue TrackingThird Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git/commit/?id=bcf6b1d78c0bde228929c388978ed3af9a623463
x_refsource_CONFIRMMailing ListPatchVendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git/commit/?id=e5d4e1c3ccee18c68f23d62ba77bda26e893d4f0
x_refsource_CONFIRMMailing ListPatchVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-0810
https://www.cve.org/CVERecord?id=CVE-2012-0810

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2012-0810		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=794557		x_refsource_MISCIssue TrackingThird Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git/commit/?id=bcf6b1d78c0bde228929c388978ed3af9a623463		x_refsource_CONFIRMMailing ListPatchVendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git/commit/?id=e5d4e1c3ccee18c68f23d62ba77bda26e893d4f0		x_refsource_CONFIRMMailing ListPatchVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-0810
https://www.cve.org/CVERecord?id=CVE-2012-0810