ubuntu · CVE-2012-1097

Quick triage

Priority: medium Published: 2012-03-07 00:00:00 UTC Updated: 2025-08-25 20:26:37 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2012-1097 medium priority: Ubuntu including 29 source packages (linux, linux-armadaxp, …), 353 status rows across 17 suites (hardy, lucid, maverick, natty, oneiric, precise, quantal, raring, saucy, trusty, upstream, utopic, vivid, wily, xenial, yakkety, zesty): DNE 252, not-affected 51, released 39, ignored 11.

Description:

The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a (1) PTRACE_GETREGSET or (2) PTRACE_SETREGSET ptrace call.

cvelogic Threat Intelligence