CVE-2012-3510: Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2....

Security readout for executives and security teams

CVE-2012-3510 is an old Linux kernel flaw that can let a local user crash the system or potentially read sensitive kernel memory. It matters mainly for legacy or unsupported Linux hosts running kernels before 2.6.19, or vendor kernels missing the backported fix. Exposure is most likely on very old Linux systems, embedded appliances, long-lived virtual machines, or vendor kernels that did not receive the taskstats accounting fix. Modern supported Linux distributions are less likely affected, but version strings alone may be misleading because vendors backport security fixes. Treat this as a legacy-system risk rather than an internet-wide emergency. Prioritize remediation where old Linux kernels support shared users, critical workloads, or appliances that are hard to monitor or patch. Mitigation focus: Apply vendor kernel updates that include the upstream taskstats fix.; For Red Hat systems, review RHSA-2012:1323 applicability.; Retire or isolate Linux kernels older than 2.6.19 where practical..

Prepared

Jun 27, 2026, 16:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.