CVE-2012-0879

The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context.

• CWE-400

• http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33Broken Link
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=61cc74fbb87af6aa551a06a370590c9bc07e29d9
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b69f2292063d2caf37ca9aec7d63ded203701bf3
• http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.htmlMailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=139447903326211&w=2Mailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0481.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0531.htmlThird Party Advisory
• http://secunia.com/advisories/48545Not Applicable
• http://secunia.com/advisories/48842Not Applicable
• http://www.debian.org/security/2012/dsa-2469Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/02/23/5Mailing List, Third Party Advisory
• http://www.securitytracker.com/id?1027086Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1408-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-1410-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-1411-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=796829Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/61cc74fbb87af6aa551a06a370590c9bc07e29d9Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/b69f2292063d2caf37ca9aec7d63ded203701bf3Patch, Third Party Advisory
• http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33Broken Link
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=61cc74fbb87af6aa551a06a370590c9bc07e29d9
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b69f2292063d2caf37ca9aec7d63ded203701bf3
• http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.htmlMailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=139447903326211&w=2Mailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0481.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0531.htmlThird Party Advisory
• http://secunia.com/advisories/48545Not Applicable
• http://secunia.com/advisories/48842Not Applicable
• http://www.debian.org/security/2012/dsa-2469Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/02/23/5Mailing List, Third Party Advisory
• http://www.securitytracker.com/id?1027086Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1408-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-1410-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-1411-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=796829Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/61cc74fbb87af6aa551a06a370590c9bc07e29d9Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/b69f2292063d2caf37ca9aec7d63ded203701bf3Patch, Third Party Advisory

Published

May 17, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0873Multiple cross-site scripting (XSS) vulnerabilities in Boone…
• CVE-2012-0874The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invo…
• CVE-2012-0875SystemTap 1.7, 1.6.7, and probably other versions, when unpr…
• CVE-2012-0876The XML parser (xmlparse.c) in expat before 2.1.0 computes h…
• CVE-2012-0877PyXML: Hash table collisions CPU usage Denial of Service7.5
• CVE-2012-0878Paste Script 1.7.5 and earlier does not properly set group m…
• CVE-2012-0880Apache Xerces-C++ allows remote attackers to cause a denial …
• CVE-2012-0881Apache Xerces2 Java Parser before 2.12.0 allows remote attac…
• CVE-2012-0882Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possib…
• CVE-2012-0883envvars (aka envvars-std) in the Apache HTTP Server before 2…
• CVE-2012-0884The implementation of Cryptographic Message Syntax (CMS) and…
• CVE-2012-0885chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and …