CVE-2012-6701

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-05-02 · updated 2026-06-16
Weakness: CWE-190

Description

Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.

Affected products

Linux kernel: before 3.0.33; from 3.1 before 3.2.19; from 3.3 before 3.3.8; from 3.4 before 3.4.1 — fixed in 3.0.33, 3.2.19, 3.3.8, 3.4.1

How to fix

Upgrade to a fixed version: Linux kernel 3.0.33, 3.2.19, 3.3.8, 3.4.1. Check the vendor advisory for mitigations.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a70b52ec1aaeaf60f4739edb1b422827cb6f3893
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.1
http://www.openwall.com/lists/oss-security/2016/03/02/9
https://access.redhat.com/errata/RHSA-2018:1854
https://bugzilla.redhat.com/show_bug.cgi?id=1314288
https://github.com/torvalds/linux/commit/a70b52ec1aaeaf60f4739edb1b422827cb6f3893
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a70b52ec1aaeaf60f4739edb1b422827cb6f3893
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.1
http://www.openwall.com/lists/oss-security/2016/03/02/9
https://access.redhat.com/errata/RHSA-2018:1854
https://bugzilla.redhat.com/show_bug.cgi?id=1314288
https://github.com/torvalds/linux/commit/a70b52ec1aaeaf60f4739edb1b422827cb6f3893

Get alerted when CVE-2012-6701 or the next vulnerability affects your stack