CVE-2012-2313

The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.

• CWE-264

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1bb57e940e1958e40d51f2078f50c3a96a9b2d75
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.htmlThird Party Advisory
• http://marc.info/?l=bugtraq&m=139447903326211&w=2Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1174.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1481.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1541.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1589.htmlThird Party Advisory
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.7Release Notes
• http://www.openwall.com/lists/oss-security/2012/05/04/8Mailing List
• http://www.securityfocus.com/bid/53965Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=818820Issue Tracking
• https://github.com/torvalds/linux/commit/1bb57e940e1958e40d51f2078f50c3a96a9b2d75Exploit, Patch
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1bb57e940e1958e40d51f2078f50c3a96a9b2d75
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.htmlThird Party Advisory
• http://marc.info/?l=bugtraq&m=139447903326211&w=2Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1174.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1481.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1541.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1589.htmlThird Party Advisory
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.7Release Notes
• http://www.openwall.com/lists/oss-security/2012/05/04/8Mailing List
• http://www.securityfocus.com/bid/53965Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=818820Issue Tracking
• https://github.com/torvalds/linux/commit/1bb57e940e1958e40d51f2078f50c3a96a9b2d75Exploit, Patch

Published

Jun 13, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2307Cross-site request forgery (CSRF) vulnerability in the Addre…
• CVE-2012-2308Cross-site scripting (XSS) vulnerability in the Taxonomy Gri…
• CVE-2012-2309Cross-site scripting (XSS) vulnerability in the Glossify Int…
• CVE-2012-2310Cross-site scripting (XSS) vulnerability in the cctags modul…
• CVE-2012-2311sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.…
• CVE-2012-2312An Elevated Privileges issue exists in JBoss AS 7 Community …7.8
• CVE-2012-2314The bootloader configuration module (pyanaconda/bootloader.p…
• CVE-2012-2315admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2…
• CVE-2012-2316Cross-site request forgery (CSRF) vulnerability in servlet/a…
• CVE-2012-2317The Debian php_crypt_revamped.patch patch for PHP 5.3.x, as …
• CVE-2012-2318msg.c in the MSN protocol plugin in libpurple in Pidgin befo…
• CVE-2012-2319Multiple buffer overflows in the hfsplus filesystem implemen…