What’s Vulnerable › Vulnerabilities

CVE-2012-6136

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-20 · updated 2026-06-16
• Weakness: CWE-276

Description

tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.

Affected products

• Debian Linux: 10.0
• Fedoraproject Fedora: 17
• Red Hat Enterprise Linux: 6.0
• RedHat Enterprise Linux Desktop: 6.0
• RedHat Enterprise Linux Server: 6.0
• RedHat Enterprise Linux Workstation: 6.0
• RedHat Tuned: 2.10.0

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6136
• https://security-tracker.debian.org/tracker/CVE-2012-6136
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6136
• https://security-tracker.debian.org/tracker/CVE-2012-6136

Get alerted when CVE-2012-6136 or the next vulnerability affects your stack