CVE-2012-2390 — kernel: huge pages: memory leak on mmap failure

Back Back to CVE browser

MEDIUM

kernel: huge pages: memory leak on mmap failure

Published Jun 13, 2012

4.9

MEDIUM

CVSS 2.0

EPSS 0.52%

Description

Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory consumption or system crash) via invalid MAP_HUGETLB mmap operations.

Affected products

Red Hat Enterprise Linux 6

kernel-0:2.6.32-279.9.1.el6

Fixed · RHSA-2012:1304
Red Hat Enterprise MRG 2

kernel-rt-0:3.0.36-rt57.66.el6rt

Fixed · RHSA-2012:1150
Red Hat Enterprise Linux 5

kernel

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel-0:2.6.32-279.9.1.el6	Fixed	RHSA-2012:1304
Red Hat Enterprise MRG 2	kernel-rt-0:3.0.36-rt57.66.el6rt	Fixed	RHSA-2012:1150
Red Hat Enterprise Linux 5	kernel	Not affected	n/a

Remediation

Red Hat statement

This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5 as they did not include the upstream commit 84afd99b that introduced this issue. Future kernel updates for Red Hat Enterprise Linux 6 may address this issue. This has been addressed in Red Hat Enterprise Linux Red Hat Enterprise MRG 2 via https://rhn.redhat.com/errata/RHSA-2012-1150.html

Metrics

0.52% 0.00519

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00519

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.52% (0.00519)	41.96th	v5 (v2026.06.15)
Jun 15, 2026	0.52% (0.00519)	39.73th	v5 (v2026.06.15)
Mar 17, 2025	0.01% (0.00015)	1.50th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	1.03% (0.01034)	41.69th	v2 (v2022.01.01)
Feb 13, 2023	1.03% (0.01034)	41.16th	v2 (v2022.01.01)
Feb 3, 2023	1.28% (0.01282)	67.60th	v2 (v2022.01.01)
Sep 10, 2022	1.03% (0.01034)	39.91th	v2 (v2022.01.01)
Apr 1, 2022	1.03% (0.01034)	37.91th	v2 (v2022.01.01)
Feb 4, 2022	1.03% (0.01034)	20.32th	v2 (v2022.01.01)

Weaknesses (2)

CWE-399

CWE-401

References (10)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c50ac050811d6485616a193eb0f37bfbd191cc89
x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.2
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2012/05/23/14
mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/USN-1515-1
vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1535-1
vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/security/cve/CVE-2012-2390
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=824345
x_refsource_CONFIRMIssue Tracking
https://github.com/torvalds/linux/commit/c50ac050811d6485616a193eb0f37bfbd191cc89
x_refsource_CONFIRMExploitPatch
https://nvd.nist.gov/vuln/detail/CVE-2012-2390
https://www.cve.org/CVERecord?id=CVE-2012-2390

Link	Providers	Tags
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c50ac050811d6485616a193eb0f37bfbd191cc89		x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.2		x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2012/05/23/14		mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/USN-1515-1		vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1535-1		vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/security/cve/CVE-2012-2390		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=824345		x_refsource_CONFIRMIssue Tracking
https://github.com/torvalds/linux/commit/c50ac050811d6485616a193eb0f37bfbd191cc89		x_refsource_CONFIRMExploitPatch
https://nvd.nist.gov/vuln/detail/CVE-2012-2390
https://www.cve.org/CVERecord?id=CVE-2012-2390