CVE-2012-6704

CVE-2012-6704 describes a memory corruption vulnerability in the Linux kernel before version 3.5, specifically within the sock_setsockopt function. This flaw allows local users with CAP_NET_ADMIN capabilities to trigger a denial of service (system crash) or potentially other impacts by providing negative values to the SO_SNDBUF or SO_RCVBUF options via a crafted setsockopt system call. Rated with a CVSS score of 7.8 (High), this vulnerability has a low attack complexity and requires local access with specific administrative privileges (AV:L/AC:L/PR:L). The potential impact is significant, leading to high confidentiality, integrity, and availability compromises (C:H/I:H/A:H). Despite its severity, there is no evidence of active exploitation, nor are there any public exploit modules or proof-of-concept codes available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, indicating a lack of widespread attention.