CVE-2012-4467: The (1) do_siocgstamp and (2) do_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 us...

Security readout for executives and security teams

CVE-2012-4467 is a Linux kernel flaw where local users could trigger an ioctl path that may leak kernel memory or crash the system. It affects kernels before 3.5.4, based on the supplied sources. The issue requires local access, so exposure depends on who can run code on affected hosts. Systems running Linux kernels before 3.5.4, or vendor kernels without the equivalent backported fix, are the likely exposure. Risk is highest on multi-user servers, shared hosting, CI runners, and systems where untrusted local code can execute. Patch during normal security maintenance, with faster handling for shared Linux infrastructure. Business urgency is driven by local access: environments allowing many users or untrusted workloads face higher crash and confidentiality risk than single-purpose, tightly administered servers. Mitigation focus: Update to Linux 3.5.4 or a vendor kernel containing the equivalent fix.; Check distribution security advisories for backported fixes before relying on version numbers alone.; Limit untrusted local shell, container, and job execution on affected hosts..

Prepared

Jun 27, 2026, 16:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.