CVE-2012-2313

Severity: low (CVSS 1.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-06-13 · updated 2026-06-16
Weakness: CWE-264

Description

The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.

Affected products

Linux kernel: through 3.3.6; 3.3, 3.3-rc1, 3.3-rc2, 3.3-rc3, 3.3-rc4, 3.3-rc5 (+7)
Novell Suse Linux Enterprise Server: 10.0-sp4
Red Hat Enterprise Linux: 5
RedHat Enterprise Linux Desktop: 5.0
RedHat Enterprise Linux Eus: 5.6.z
RedHat Enterprise Linux Long Life: 5.6
RedHat Enterprise Linux Server Aus: 6.2
RedHat Enterprise Linux Server Eus: 6.1.z, 6.2.z

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1bb57e940e1958e40d51f2078f50c3a96a9b2d75
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
http://marc.info/?l=bugtraq&m=139447903326211&w=2
http://rhn.redhat.com/errata/RHSA-2012-1174.html
http://rhn.redhat.com/errata/RHSA-2012-1481.html
http://rhn.redhat.com/errata/RHSA-2012-1541.html
http://rhn.redhat.com/errata/RHSA-2012-1589.html
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.7
http://www.openwall.com/lists/oss-security/2012/05/04/8
http://www.securityfocus.com/bid/53965
https://bugzilla.redhat.com/show_bug.cgi?id=818820
https://github.com/torvalds/linux/commit/1bb57e940e1958e40d51f2078f50c3a96a9b2d75

Get alerted when CVE-2012-2313 or the next vulnerability affects your stack