PT-2010-1040 · Linux+2 · Linux Kernel+2
Tavis Ormandy
·
Published
2010-08-20
·
Updated
2023-02-13
·
CVE-2010-3080
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
drbd-kmp-default versions (affected versions not specified)
Linux kernel versions prior to 2.6.36-rc4
Description
The issue concerns multiple vulnerabilities in the drbd-kmp-default package of the openSUSE operating system, which can be exploited locally to compromise the confidentiality, integrity, and availability of protected information. Additionally, a double free vulnerability exists in the
snd seq oss open function of the Linux kernel, potentially allowing local users to cause a denial of service or have other unspecified impacts by attempting to open the /dev/sequencer device.Recommendations
For drbd-kmp-default, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Linux kernel versions prior to 2.6.36-rc4, update to version 2.6.36-rc4 or later to resolve the issue. As a temporary workaround, consider restricting access to the /dev/sequencer device to minimize the risk of exploitation.
DoS
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat
Drbd-Kmp-Default