peter bassill · operator
$ cve CVE-2012-5375 JSON

CVE-2012-5375 EXPLOIT

4.0
MEDIUM · CVSS 2.0 · EPSS 0.9% (pctl 57)

Patch early

A public exploit exists.

Description

The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (prevention of file creation) by leveraging the ability to write to a directory important to the victim, and creating a file with a crafted name that is associated with a specific CRC32C hash value.

Scoring

CVSS4.0 (MEDIUM, v2.0)
VectorAV:L/AC:H/Au:N/C:N/I:N/A:C
EPSS0.86% — more likely to be exploited than 57% of all CVEs
WeaknessCWE-310
On CISA KEVno
Public exploityes
Published2013-02-18
Last modified2026-06-16

Affected (1)

VendorProduct
linuxlinux kernel

Public exploits

SourceTitleDate
exploit-dbLinux Kernel 3.3.5 - Btrfs CRC32C feature Infinite Loop Local Denial of Service2012-12-13

References

→ the Explorer  ·  watch your stack  ·  NVD