CVE-2012-3400: Canonical Ubuntu Linux

High severity, CVSS 7.6. EPSS: 7.8% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the udf_load_logicalvol function in fs/udf/super.c in the Linux kernel before 3.4.5 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted UDF filesystem.

Affected products

• Canonical Ubuntu Linux: version 10.04 only; version 11.04 only; version 12.04 only
• Linux Linux Kernel: before 3.0.37 (fixed in 3.0.37); from 3.1, before 3.2.23 (fixed in 3.2.23); from 3.4, before 3.4.5 (fixed in 3.4.5)

Published 2012-10-03. Last modified 2026-06-16.