CVE-2012-5374: The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cau...

Security readout for executives and security teams

This is an old Linux kernel Btrfs denial-of-service issue. A local user could force excessive kernel work by creating many filenames that collide under Btrfs CRC32C hashing. Business risk is mainly service slowdown or outage on systems that allow local writes to affected Btrfs filesystems. Exposure is most likely on legacy Linux systems running Btrfs with kernels before 3.8-rc1 or unpatched vendor kernels from that era. Systems without Btrfs, without local untrusted users, or on maintained patched kernels are less likely exposed. Treat as a legacy local denial-of-service risk. It is not described as remote code execution, but affected shared or multi-tenant Linux systems could experience availability impact. Prioritize patch verification where Btrfs and untrusted local write access coexist. Mitigation focus: Upgrade affected Linux kernels to a vendor-fixed release or kernel 3.8-rc1 or later.; Apply relevant Ubuntu, openSUSE, or other distribution kernel security updates.; Prioritize systems using Btrfs with local shell, hosting, container, or shared-write workloads..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.