Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2012-0056

39
FAUCET Score

CVE-2012-0056 is a local privilege escalation vulnerability affecting the Linux kernel before version 3.2.2. It arises from improper permission checks in the mem_write function when writing to /proc/<pid>/mem, specifically when ASLR is disabled. This vulnerability has a CVSS score of 6.9, indicating high severity with local access and medium attack complexity, leading to complete confidentiality, integrity, and availability compromise. Exploit code, known as "Mempodipper," is publicly available on ExploitDB, and the vulnerability has garnered significant community discussion and media coverage, although it is not currently on CISA's KEV catalog.

Impacted Technologies

VendorProductVersion(s)CPE
>= 2.6.39, < 3.0.18CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.1, < 3.2.2CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

6.9MEDIUM

AV:L/AC:M/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
3.4
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
10.90%
Probability of exploitation in next 30 days
EPSS Percentile
95.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-18411 · Jan 23, 2012
This CVE's current EPSS score of 0.1090 is in the 100th percentile among its peer group of 1,595 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: kernel-0:2.6.32-220.4.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise MRG 2Fixed in: kernel-rt-0:3.0.9-rt26.46.el6rt
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: kernel

Vendor Advisories (1)

redhatCVE-2012-0056Important

kernel: proc: /proc/<pid>/mem mem_write insufficient permission checking

Jan 18, 2012

References

blog.zx2c4.com / 749
Third Party Advisory
git.kernel.org
Vendor Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingThird Party Advisory
secunia.com / advisories/47708
Broken Link
ubuntu.com / usn/usn-1336-1
Third Party Advisory
kb.cert.org / vuls/id/470151
Third Party AdvisoryUS Government Resource
kernel.org / pub/linux/kernel/v3.x/ChangeLog-3.2.2
Vendor Advisory
openwall.com / lists/oss-security/2012/01/18/1
Mailing ListThird Party Advisory
openwall.com / lists/oss-security/2012/01/18/2
Mailing ListThird Party Advisory
openwall.com / lists/oss-security/2012/01/19/4
Mailing ListThird Party Advisory
openwall.com / lists/oss-security/2012/01/22/4
Mailing ListThird Party Advisory
redhat.com / support/errata/RHSA-2012-0052.html
Third Party Advisory
redhat.com / support/errata/RHSA-2012-0061.html
Third Party Advisory
securityfocus.com / bid/51625
Third Party AdvisoryVDB Entry