CVE catalog

CVE-2012-0879

linux-2.6 - several

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.47% · Oct 25, 2026

The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlinux-2.66.02.6.32-30vulnerable
Debianlinux-2.66.02.6.32-30+m68k.5vulnerable
Debianlinux-2.66.02.6.32-31vulnerable
Debianlinux-2.66.02.6.32-31~bpo50+1vulnerable
Debianlinux-2.66.02.6.32-32vulnerable
Debianlinux-2.66.02.6.32-33vulnerable
Debianlinux-2.66.02.6.32-34vulnerable
Debianlinux-2.66.02.6.32-34squeeze1vulnerable
Debianlinux-2.66.02.6.32-35vulnerable
Debianlinux-2.66.02.6.32-35squeeze1vulnerable
Debianlinux-2.66.02.6.32-35squeeze2vulnerable
Debianlinux-2.66.02.6.32-35~bpo50+1vulnerable
Debianlinux-2.66.02.6.32-36vulnerable
Debianlinux-2.66.02.6.32-37vulnerable
Debianlinux-2.66.02.6.32-38vulnerable
Debianlinux-2.66.02.6.32-39vulnerable
Debianlinux-2.66.02.6.32-39squeeze1vulnerable
Debianlinux-2.66.02.6.32-40vulnerable
Debianlinux-2.66.02.6.32-41vulnerable
Debianlinux-2.66.02.6.32-41squeeze2vulnerable
Debianlinux-2.66.02.6.32-42vulnerable
Debianlinux-2.66.02.6.32-43vulnerable
Debianlinux-2.66.02.6.32-44fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlinux-2.6deb6.02.6.32-44Not reportedDSA-2469-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]