CVE-2012-0038

Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service (panic) via a filesystem with a malformed ACL, leading to a heap-based buffer overflow.

• CWE-190

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=093019cf1b18dd31b2c3b77acce4e000e2cbc9ce
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.9Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/01/10/11Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=773280Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/093019cf1b18dd31b2c3b77acce4e000e2cbc9cePatch, Third Party Advisory
• https://github.com/torvalds/linux/commit/fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bbaPatch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=093019cf1b18dd31b2c3b77acce4e000e2cbc9ce
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.9Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/01/10/11Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=773280Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/093019cf1b18dd31b2c3b77acce4e000e2cbc9cePatch, Third Party Advisory
• https://github.com/torvalds/linux/commit/fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bbaPatch, Third Party Advisory

Published

May 17, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0032Red Hat JBoss Operations Network (JON) before 3.0.1 uses 077…
• CVE-2012-0033The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in t…
• CVE-2012-0034The NonManagedConnectionFactory in JBoss Enterprise Applicat…
• CVE-2012-0035Untrusted search path vulnerability in EDE in CEDET before 1…
• CVE-2012-0036curl and libcurl 7.2x before 7.24.0 do not properly consider…
• CVE-2012-0037Redland Raptor (aka libraptor) before 2.0.7, as used by Open…6.5
• CVE-2012-0039GLib 2.31.8 and earlier, when the g_str_hash function is use…7.5
• CVE-2012-0040Cross-site scripting (XSS) vulnerability in modules/core/www…
• CVE-2012-0041The dissect_packet function in epan/packet.c in Wireshark 1.…
• CVE-2012-0042Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does no…
• CVE-2012-0043Buffer overflow in the reassemble_message function in epan/d…
• CVE-2012-0044Integer overflow in the drm_mode_dirtyfb_ioctl function in d…7.8