CVE-2012-3412: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 5.9% chance of exploitation in the next 30 days.

The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that trigger a small MSS value.

Affected products

• Canonical Ubuntu Linux: version 10.04 only; version 11.04 only; version 11.10 only; version 12.04 only
• Linux Linux Kernel: before 3.0.44 (fixed in 3.0.44); from 3.1, before 3.2.30 (fixed in 3.2.30); from 3.3, before 3.4.12 (fixed in 3.4.12); from 3.5, before 3.5.5 (fixed in 3.5.5)

Published 2012-10-03. Last modified 2026-06-16.