PT-2010-1038 · Linux+1 · Linux Kernel+1

Tavis Ormandy · Published 2010-08-20 · Updated 2024-06-15 · CVE-2010-2954

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions drbd-kmp-default versions (affected versions not specified) Linux kernel versions prior to 2.6.36-rc3-next-20100901

Description The issue affects the drbd-kmp-default package in openSUSE and the Linux kernel, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Exploitation can occur locally. In the Linux kernel, the irda bind function does not properly handle the failure of the irda open tsap function, allowing local users to cause a denial of service via multiple unsuccessful calls to bind on an AF IRDA (aka PF IRDA) socket, such as /dev/irda.

Recommendations For drbd-kmp-default, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Linux kernel versions prior to 2.6.36-rc3-next-20100901, update to version 2.6.36-rc3-next-20100901 or later to resolve the issue. As a temporary workaround, consider restricting access to the AF IRDA socket to minimize the risk of exploitation.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

CWE-189

Related Identifiers

BDU:2015-05302

CVE-2010-2954

DSA-2110-1

OPENSUSE-SU-2024:10128-1

Affected Products

Linux Kernel

Drbd-Kmp-Default

References · 103

• https://osv.dev/vulnerability/openSUSE-SU-2024:10128-1 · Vendor Advisory
• http://spinics.net/lists/netdev/msg139404.html · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=628770 · Patch
• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05302 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-2954 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html · Vendor Advisory
• http://ubuntu.com/usn/USN-1000-1 · Vendor Advisory
• http://marc.info/?l=oss-security&m=128331787923285&w=2 · Patch
• https://suse.com/security/cve/CVE-2016-3713 · Note
• https://suse.com/security/cve/CVE-2010-2066 · Note
• https://suse.com/security/cve/CVE-2016-7039 · Note
• https://suse.com/security/cve/CVE-2016-2186 · Note