CVE-2010-3081
24.09.2010, 20:00
The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 𝑥 ≤ 2.6.35.4 |
| linux | linux_kernel | 2.6.36 |
| linux | linux_kernel | 2.6.36:rc1 |
| linux | linux_kernel | 2.6.36:rc2 |
| linux | linux_kernel | 2.6.36:rc3 |
| vmware | esx | 4.0 |
| vmware | esx | 4.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| linux |
| ||||||||||||
| linux-fsl-imx51 |
| ||||||||||||
| linux-source-2.6.15 |
| ||||||||||||
| linux-ti-omap4 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||
|---|---|---|---|---|---|---|---|
| kernel-default |
| ||||||
| kernel-docs |
| ||||||
| kernel-macros |
| ||||||
| kernel-obs-build |
| ||||||
| kernel-source |
| ||||||
| kernel-syms |
| ||||||
| kernel-vanilla-base |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| kernel |
| ||
| kernel-bootwrapper |
| ||
| kernel-debug |
| ||
| kernel-debug-devel |
| ||
| kernel-devel |
| ||
| kernel-doc |
| ||
| kernel-firmware |
| ||
| kernel-headers |
| ||
| kernel-kdump |
| ||
| kernel-kdump-devel |
| ||
| perf |
|
Common Weakness Enumeration
References