CVE-2012-2375

CVE-2012-2375 is a denial-of-service vulnerability affecting the Linux kernel's NFSv4 implementation, specifically in versions prior to 3.3.2. It stems from an incorrect length variable used during a copy operation within the __nfs4_get_acl_uncached function. This allows a malicious remote NFS server to trigger a system crash (OOPS) by sending an overly large number of bitmap words in an FATTR4_ACL reply. The vulnerability has a CVSS score of 4.6, indicating a medium severity. It requires adjacent network access (AV:A) and high attack complexity (AC:H), with no authentication needed (Au:N), leading to a complete denial of service (A:C) but no impact on confidentiality or integrity. There is no evidence of active exploitation, nor is there any known public exploit code available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public attention.