Vulnetix
Try Vulnetix Request Demo
CVE-2010-4258 PUBLISHED CVSS 6.900000095367432 MEDIUM

The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a (1) BUG, (2) NULL pointer dereference, or (3) page fault, as demonstrated by vectors involving the clear_child_tid feature and the splice system call.

EPSS 5.86% · 90.5th percentile

Risk Scores

CVSS v4.0
6.900000095367432
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS Score
5.86%
90.5th percentile

Affected Products

VendorProductVersions
suselinux_enterprise_real_time_extension11
fedoraprojectfedora13
suselinux_enterprise_server11, 10, 9
suselinux_enterprise_software_development_kit10
n/an/an/a
opensuseopensuse11.3, 11.2
linuxlinux_kernel0
suselinux_enterprise_desktop11, 10

Timeline

References

…and 21 more

Open in Interactive Console →