Unscored severity · published Jun 13, 2012
CVE-2012-2313
The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write…
–
CVSS
0.6%
EPSS
No
On KEV
Description
The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
through 3.3.6; 3.3; 3.3; 3.3; 3.3; 3.3; +8 more · source: NVD
EL
Enterprise Linux · Redhat
5 · source: NVD
EL
Enterprise Linux Desktop · Redhat
5.0 · source: NVD
EL
Enterprise Linux Eus · Redhat
5.6.z · source: NVD
EL
Enterprise Linux Long Life · Redhat
5.6 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
6.2 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
6.1.z; 6.2.z · source: NVD
SL
Suse Linux Enterprise Server · Novell
10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2313
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2313
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1bb57e940e1958e40d51f2078f50c3a96a9b2d75
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
Third Party Advisory
http://marc.info/?l=bugtraq&m=139447903326211&w=2
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1174.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1481.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1541.html
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability