CVE-2012-0028: Linux Kernel

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.

Affected products

• Linux Linux Kernel: up to and including 2.6.27.62; version 2.6.27 only; version 2.6.27.1 only; version 2.6.27.2 only; version 2.6.27.3 only; version 2.6.27.4 only; …

Published 2012-06-21. Last modified 2026-06-16.