CVE-2012-0038 — Linux Kernel Vulnerability

What is CVE-2012-0038?

Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service (panic) via a filesystem with a malformed ACL, leading to a heap-based buffer overflow.

The record classifies CVE-2012-0038 under weakness class CWE-190. Its CVSS v3 base vector states that the flaw requires local access to the host, needs low-privilege credentials, needs no user interaction, and has high impact on availability. 1 affected-product entry is recorded, across 1 vendor, listed below. The identifier was first published 5254 days ago.

Severity and exploitation probability

CVSS v3.1 base score: 5.5 — MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (FIRST): 0.3% probability of exploitation in the next 30 days, higher than 32.6% of all scored CVEs
CISA KEV: Not listed in the CISA Known Exploited Vulnerabilities catalog
Threadlinqs priority: 4.1/10 — a Threadlinqs composite of the CVSS base score, the EPSS percentile and public exploit availability
Published: 2012-05-17, last modified 2024-08-06

Is CVE-2012-0038 being exploited?

No public exploitation evidence for CVE-2012-0038 is recorded in the sources Threadlinqs tracks — CISA KEV, Exploit-DB, public proof-of-concept repositories and ProjectDiscovery Nuclei — as of 2024-08-06. That is an absence of evidence in those feeds, not a guarantee that the vulnerability is unexploited.

Affected products and versions

Linux: Kernel

How to fix CVE-2012-0038

The record marks a vendor fix as available for CVE-2012-0038. Patch reference: http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.9. Vendor advisory: http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.9. Apply the vendor fix referenced above to every affected product listed in this record, then confirm the running version against the vendor advisory.

Threat activity tracking CVE-2012-0038

1 tracked threat in the Threadlinqs corpus references CVE-2012-0038, either in the campaign’s CVE list or as an indicator on the campaign record.

UT Dallas Study: Multi-Patch CVE Fixes Leave Open Source Exposed to N-Day Exploitation Windows — MEDIUM · 2026-07-26

Sources

Enriched from CVE.org, NVD, FIRST EPSS, GitHub Security Advisories. Last verified by Threadlinqs on 2026-07-27. This product uses the NVD API but is not endorsed or certified by the NVD.

Vendor advisory and patch

Mailing list and disclosure

openwall.com — mailing list

Showing 6 of 7 recorded references.