Read the docs
TI-2012-00027 Aliases CVE-2012-0028GHSA-9qx9-h259-89mm

The robust futex implementation in the Linux kernel before 2.6.28 does not properly…

Priority LOW 32CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.

Why it matters now

EPSS 0.00499 43rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 63

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*up to 2.6.27.62VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*2.6.27VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*2.6.27.1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*2.6.27.2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*2.6.27.3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*2.6.27.4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*2.6.27.5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*2.6.27.6VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*2.6.27.7VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*2.6.27.8VulnerableLinux
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions up to 2.6.27.62 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:* Versions 2.6.27 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:* Versions 2.6.27.1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:* Versions 2.6.27.2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:* Versions 2.6.27.3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:* Versions 2.6.27.4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:* Versions 2.6.27.5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:* Versions 2.6.27.6 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:* Versions 2.6.27.7 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:* Versions 2.6.27.8 Vulnerable ·Linux
Show 53 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*2.6.27.9VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*2.6.27.10VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*2.6.27.11VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*2.6.27.12VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*2.6.27.13VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*2.6.27.14VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*2.6.27.15VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*2.6.27.16VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*2.6.27.17VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*2.6.27.18VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*2.6.27.19VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*2.6.27.20VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*2.6.27.21VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*2.6.27.22VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*2.6.27.23VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*2.6.27.24VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*2.6.27.25VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*2.6.27.26VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*2.6.27.27VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*2.6.27.28VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*2.6.27.29VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*2.6.27.30VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*2.6.27.31VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.32:*:*:*:*:*:*:*2.6.27.32VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.33:*:*:*:*:*:*:*2.6.27.33VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.34:*:*:*:*:*:*:*2.6.27.34VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.35:*:*:*:*:*:*:*2.6.27.35VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.36:*:*:*:*:*:*:*2.6.27.36VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.37:*:*:*:*:*:*:*2.6.27.37VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.38:*:*:*:*:*:*:*2.6.27.38VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.39:*:*:*:*:*:*:*2.6.27.39VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.40:*:*:*:*:*:*:*2.6.27.40VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.41:*:*:*:*:*:*:*2.6.27.41VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.42:*:*:*:*:*:*:*2.6.27.42VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.43:*:*:*:*:*:*:*2.6.27.43VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.44:*:*:*:*:*:*:*2.6.27.44VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.45:*:*:*:*:*:*:*2.6.27.45VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.46:*:*:*:*:*:*:*2.6.27.46VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.47:*:*:*:*:*:*:*2.6.27.47VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.48:*:*:*:*:*:*:*2.6.27.48VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.49:*:*:*:*:*:*:*2.6.27.49VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.50:*:*:*:*:*:*:*2.6.27.50VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.51:*:*:*:*:*:*:*2.6.27.51VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.52:*:*:*:*:*:*:*2.6.27.52VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.53:*:*:*:*:*:*:*2.6.27.53VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.54:*:*:*:*:*:*:*2.6.27.54VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.55:*:*:*:*:*:*:*2.6.27.55VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.56:*:*:*:*:*:*:*2.6.27.56VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.57:*:*:*:*:*:*:*2.6.27.57VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.58:*:*:*:*:*:*:*2.6.27.58VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.59:*:*:*:*:*:*:*2.6.27.59VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.60:*:*:*:*:*:*:*2.6.27.60VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.27.61:*:*:*:*:*:*:*2.6.27.61VulnerableLinux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:* Versions 2.6.27.9 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:* Versions 2.6.27.10 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:* Versions 2.6.27.11 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:* Versions 2.6.27.12 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:* Versions 2.6.27.13 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:* Versions 2.6.27.14 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:* Versions 2.6.27.15 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:* Versions 2.6.27.16 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:* Versions 2.6.27.17 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:* Versions 2.6.27.18 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:* Versions 2.6.27.19 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:* Versions 2.6.27.20 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:* Versions 2.6.27.21 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:* Versions 2.6.27.22 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:* Versions 2.6.27.23 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:* Versions 2.6.27.24 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:* Versions 2.6.27.25 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:* Versions 2.6.27.26 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:* Versions 2.6.27.27 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:* Versions 2.6.27.28 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:* Versions 2.6.27.29 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:* Versions 2.6.27.30 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:* Versions 2.6.27.31 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.32:*:*:*:*:*:*:* Versions 2.6.27.32 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.33:*:*:*:*:*:*:* Versions 2.6.27.33 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.34:*:*:*:*:*:*:* Versions 2.6.27.34 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.35:*:*:*:*:*:*:* Versions 2.6.27.35 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.36:*:*:*:*:*:*:* Versions 2.6.27.36 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.37:*:*:*:*:*:*:* Versions 2.6.27.37 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.38:*:*:*:*:*:*:* Versions 2.6.27.38 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.39:*:*:*:*:*:*:* Versions 2.6.27.39 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.40:*:*:*:*:*:*:* Versions 2.6.27.40 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.41:*:*:*:*:*:*:* Versions 2.6.27.41 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.42:*:*:*:*:*:*:* Versions 2.6.27.42 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.43:*:*:*:*:*:*:* Versions 2.6.27.43 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.44:*:*:*:*:*:*:* Versions 2.6.27.44 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.45:*:*:*:*:*:*:* Versions 2.6.27.45 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.46:*:*:*:*:*:*:* Versions 2.6.27.46 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.47:*:*:*:*:*:*:* Versions 2.6.27.47 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.48:*:*:*:*:*:*:* Versions 2.6.27.48 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.49:*:*:*:*:*:*:* Versions 2.6.27.49 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.50:*:*:*:*:*:*:* Versions 2.6.27.50 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.51:*:*:*:*:*:*:* Versions 2.6.27.51 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.52:*:*:*:*:*:*:* Versions 2.6.27.52 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.53:*:*:*:*:*:*:* Versions 2.6.27.53 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.54:*:*:*:*:*:*:* Versions 2.6.27.54 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.55:*:*:*:*:*:*:* Versions 2.6.27.55 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.56:*:*:*:*:*:*:* Versions 2.6.27.56 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.57:*:*:*:*:*:*:* Versions 2.6.27.57 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.58:*:*:*:*:*:*:* Versions 2.6.27.58 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.59:*:*:*:*:*:*:* Versions 2.6.27.59 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.60:*:*:*:*:*:*:* Versions 2.6.27.60 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.27.61:*:*:*:*:*:*:* Versions 2.6.27.61 Vulnerable ·Linux

Remediation

Red Hat 2 advisories

  • RHSA-2012:0358 Released 2012-03-06 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux EUS (v. 5.6 server) kernel-2.6.18-238.35.1.el5, kernel-2.6.18-238.35.1.el5.ia64, kernel-PAE-2.6.18-238.35.1.el5 +18
  • RHSA-2012:0107 Released 2012-02-09 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-274.18.1.el5, kernel-2.6.18-274.18.1.el5.ia64, kernel-PAE-2.6.18-274.18.1.el5 +18
    • Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-274.18.1.el5, kernel-PAE-2.6.18-274.18.1.el5, kernel-PAE-devel-2.6.18-274.18.1.el5 +8

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2012:0107
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2012:0107
Red Hat Enterprise Linux EUS (v. 5.6 server)Fixed RHSA-2012:0358
Not affected: 3 products
  • Red Hat Enterprise Linux 4
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise MRG 2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-0028
  2. 2026-10-03 Alias added: GHSA-9qx9-h259-89mm

References

Exploit 1

Other 4

  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
  • TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
  • TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
  • TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
  • TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
See all 15278 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences