CVE-2012-6704
kernel: Signed overflows in SO_{SND|RCV}BUF in sock_setsockopt()
Severity
ModerateRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · April 26, 2012
Updated · November 21, 2025
Description
A flaw was found in the Linux kernel's implementation of setsockopt for the SO_{SND|RCV}BUF setsockopt() system call. Users with non-namespace CAP_NET_ADMIN are able to trigger this call and create a situation in which the sockets sendbuff data size could be negative.
Statement
This issue does not affect the kernels as shipping with Red Hat Enterprise Linux 5, 6, 7, MRG-2 and realtime.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 6.7CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 · 6.9AV:L/AC:M/Au:N/C:C/I:C/A:C
CWE-190 · Integer Overflow or Wraparound