CVE-2012-2372: Linux Kernel

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG_ON and kernel panic) by establishing an RDS connection with the source IP address equal to the IPoIB interface's own IP address, as demonstrated by rds-ping.

Affected products

• Linux Linux Kernel: up to and including 3.7.4; version 3.7 only; version 3.7.1 only; version 3.7.2 only; version 3.7.3 only

Published 2013-01-22. Last modified 2026-06-16.