CVE-2012-3510: Linux Kernel

Medium severity, CVSS 5.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or cause a denial of service (system crash) via a taskstats TASKSTATS_CMD_ATTR_PID command.

Affected products

• Linux Linux Kernel: up to and including 2.6.18.8; version 2.6.10 only; version 2.6.11 only; version 2.6.11.1 only; version 2.6.11.2 only; version 2.6.11.3 only; …

Published 2012-10-03. Last modified 2026-06-16.