# CVEs published 2012-05-17

21 CVEs were published on May 17, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3637](https://cve.now/CVE-2011-3637.md): The m\_stop function in fs/proc/task\_mmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (OOPS) via vecto (no CVSS)
- [CVE-2011-4097](https://cve.now/CVE-2011-4097.md): Integer overflow in the oom\_badness function in mm/oom\_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cau (no CVSS)
- [CVE-2011-4112](https://cve.now/CVE-2011-4112.md): The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFF\_TX\_SKB\_SHARING flag, which allows local users to (no CVSS)
- [CVE-2011-4131](https://cve.now/CVE-2011-4131.md): The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS s (no CVSS)
- [CVE-2011-4326](https://cve.now/CVE-2011-4326.md): The udp6\_ufo\_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configura (no CVSS)
- [CVE-2011-4594](https://cve.now/CVE-2011-4594.md): The \_\_sys\_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via (no CVSS)
- [CVE-2011-4611](https://cve.now/CVE-2011-4611.md): Integer overflow in the perf\_event\_interrupt function in arch/powerpc/kernel/perf\_event.c in the Linux kernel before 2.6.39 on powerpc platf (no CVSS)
- [CVE-2011-4621](https://cve.now/CVE-2011-4621.md): The Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization, which allows local users to cause a denial o (no CVSS)
- [CVE-2012-0038](https://cve.now/CVE-2012-0038.md): Integer overflow in the xfs\_acl\_from\_disk function in fs/xfs/xfs\_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial (no CVSS)
- [CVE-2012-0044](https://cve.now/CVE-2012-0044.md): Integer overflow in the drm\_mode\_dirtyfb\_ioctl function in drivers/gpu/drm/drm\_crtc.c in the Direct Rendering Manager (DRM) subsystem in the (no CVSS)
- [CVE-2012-0058](https://cve.now/CVE-2012-0058.md): The kiocb\_batch\_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vector (no CVSS)
- [CVE-2012-0207](https://cve.now/CVE-2012-0207.md): The igmp\_heard\_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divi (no CVSS)
- [CVE-2012-0879](https://cve.now/CVE-2012-0879.md): The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE\_IO feature, which allows local (no CVSS)
- [CVE-2012-1090](https://cve.now/CVE-2012-1090.md): The cifs\_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attem (no CVSS)
- [CVE-2012-1097](https://cve.now/CVE-2012-1097.md): The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which (no CVSS)
- [CVE-2012-1146](https://cve.now/CVE-2012-1146.md): The mem\_cgroup\_usage\_unregister\_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events (no CVSS)
- [CVE-2012-1179](https://cve.now/CVE-2012-1179.md): The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service (host OS crash) by leveraging administra (no CVSS)
- [CVE-2012-1601](https://cve.now/CVE-2012-1601.md): The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service (NULL pointer dereference and host (no CVSS)
- [CVE-2012-2121](https://cve.now/CVE-2012-2121.md): The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which (no CVSS)
- [CVE-2012-2123](https://cve.now/CVE-2012-2123.md): The cap\_bprm\_set\_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system cap (no CVSS)
- [CVE-2012-2319](https://cve.now/CVE-2012-2319.md): Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-05-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.