PT-2010-5616 · Linux+1 · Linux+1

Eugene Teo · Published 1970-01-01 · Updated 2018-10-10 · CVE-2010-1088

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions linux-image-2.6.26-2-vserver-686-bigmem versions 2.6.26-2 linux-headers-2.6.26-2-all-mips versions 2.6.26-2 linux-headers-2.6.26-2-ixp4xx versions 2.6.26-2 linux-image-2.6.26-2-vserver-sparc64 versions 2.6.26-2 linux-headers-2.6.26-2-s390 versions 2.6.26-2 linux-headers-2.6.26-2-all-s390 versions 2.6.26-2 linux-headers-2.6.26-2-686-bigmem versions 2.6.26-2 linux-headers-2.6.26-2-vserver-powerpc versions 2.6.26-2 linux-image-2.6.26-2-parisc versions 2.6.26-2 linux-image-2.6.26-2-sparc64 versions 2.6.26-2 linux-headers-2.6.26-2-mckinley versions 2.6.26-2 linux-image-2.6.26-2-r4k-ip22 versions 2.6.26-2 linux-headers-2.6.26-2-xen-686 versions 2.6.26-2 linux-image-2.6.26-2-parisc64-smp versions 2.6.26-2 linux-doc-2.6.26 versions 2.6.26 linux-headers-2.6.26-2-r4k-ip22 versions 2.6.26-2 linux-headers-2.6.26-2-iop32x versions 2.6.26-2 linux-headers-2.6.26-2-r5k-ip32 versions 2.6.26-2 linux-image-2.6.26-2-s390-tape versions 2.6.26-2 linux-image-2.6.26-2-alpha-generic versions 2.6.26-2 linux-headers-2.6.26-2-vserver-amd64 versions 2.6.26-2 linux-image-2.6.26-2-486 versions 2.6.26-2 linux-headers-2.6.26-2-powerpc64 versions 2.6.26-2 linux-headers-2.6.26-2-openvz-686 versions 2.6.26-2 linux-headers-2.6.26-2-versatile versions 2.6.26-2 linux-headers-2.6.26-2-alpha-generic versions 2.6.26-2 linux-headers-2.6.26-2-itanium versions 2.6.26-2 linux-image-2.6.26-2-vserver-amd64 versions 2.6.26-2 linux-image-2.6.26-2-vserver-s390x versions 2.6.26-2 linux-headers-2.6.26-2-vserver-686-bigmem versions 2.6.26-2 linux-headers-2.6.26-2-5kc-malta versions 2.6.26-2 linux-headers-2.6.26-2-all-sparc versions 2.6.26-2 linux-headers-2.6.26-2-sparc64 versions 2.6.26-2 linux-tree-2.6.26 versions 2.6.26 linux-image-2.6.26-2-amd64 versions 2.6.26-2 linux-modules-2.6.26-2-xen-686 versions 2.6.26-2 linux-image-2.6.26-2-vserver-686 versions 2.6.26-2 linux-image-2.6.26-2-5kc-malta versions 2.6.26-2 linux-image-2.6.26-2-4kc-malta versions 2.6.26-2 linux-image-2.6.26-2-alpha-smp versions 2.6.26-2 linux-headers-2.6.26-2-4kc-malta versions 2.6.26-2 linux-headers-2.6.26-2-r5k-cobalt versions 2.6.26-2 linux-headers-2.6.26-2-all-i386 versions 2.6.26-2 linux-image-2.6.26-2-iop32x versions 2.6.26-2 linux-headers-2.6.26-2-vserver-s390x versions 2.6.26-2 linux-headers-2.6.26-2-all-mipsel versions 2.6.26-2 linux-image-2.6.26-2-openvz-amd64 versions 2.6.26-2 linux-headers-2.6.26-2-all-arm versions 2.6.26-2 linux-headers-2.6.26-2-all-alpha versions 2.6.26-2 linux-headers-2.6.26-2-vserver-686 versions 2.6.26-2 linux-image-2.6.26-2-vserver-itanium versions 2.6.26-2 linux-headers-2.6.26-2-common-xen versions 2.6.26-2 linux-headers-2.6.26-2-all-hppa versions 2.6.26-2 linux-image-2.6.26-2-footbridge versions 2.6.26-2 linux-modules-2.6.26-2-xen-amd64 versions 2.6.26-2 linux-image-2.6.26-2-xen-amd64 versions 2.6.26-2 linux-headers-2.6.26-2-amd64 versions 2.6.26-2 linux-image-2.6.26-2-mckinley versions 2.6.26-2 linux-image-2.6.26-2-versatile versions 2.6.26-2 linux-headers-2.6.26-2-all-amd64 versions 2.6.26-2 linux-image-2.6.26-2-itanium versions 2.6.26-2 linux-image-2.6.26-2-powerpc64 versions 2.6.26-2 linux-headers-2.6.26-2-sparc64-smp versions 2.6.26-2 linux-manual-2.6.26 versions 2.6.26 linux-headers-2.6.26-2-xen-amd64 versions 2.6.26-2 linux-image-2.6.26-2-powerpc-smp versions 2.6.26-2 linux-image-2.6.26-2-sparc64-smp versions 2.6.26-2 linux-headers-2.6.26-2-vserver-powerpc64 versions 2.6.26-2 linux-image-2.6.26-2-r5k-ip32 versions 2.6.26-2 linux-image-2.6.26-2-s390x versions 2.6.26-2 linux-image-2.6.26-2-r5k-cobalt versions 2.6.26-2 linux-headers-2.6.26-2-powerpc-smp versions 2.6.26-2 linux-headers-2.6.26-2-orion5x versions 2.6.26-2 linux-headers-2.6.26-2-openvz-amd64 versions 2.6.26-2 linux-image-2.6.26-2-vserver-powerpc versions 2.6.26-2 linux-headers-2.6.26-2-686 versions 2.6.26-2 linux-image-2.6.26-2-686-bigmem versions 2.6.26-2 linux-image-2.6.26-2-orion5x versions 2.6.26-2 linux-headers-2.6.26-2-all-powerpc versions 2.6.26-2 linux-image-2.6.26-2-vserver-powerpc64 versions 2.6.26-2 linux-patch-debian-2.6.26 versions 2.6.26 linux-image-2.6.26-2-ixp4xx versions 2.6.26-2 linux-image-2.6.26-2-parisc-smp versions 2.6.26-2 linux-headers-2.6.26-2-486 versions 2.6.26-2 linux-image-2.6.26-2-parisc64 versions 2.6.26-2 linux-headers-2.6.26-2-vserver-sparc64 versions 2.6.26-2 linux-image-2.6.26-2-powerpc versions 2.6.26-2 linux-source-2.6.26 versions 2.6.26 linux-headers-2.6.26-2-all versions 2.6.26-2 linux-headers-2.6.26-2-parisc64-smp versions 2.6.26-2 linux-image-2.6.26-2-xen-686 versions 2.6.26-2 linux-image-2.6.26-2-686 versions 2.6.26-2 linux-headers-2.6.26-2-vserver-itanium versions 2.6.26-2 linux-headers-2.6.26-2-parisc-smp versions 2.6.26-2 linux-headers-2.6.26-2-alpha-smp versions 2.6.26-2 linux-headers-2.6.26-2-sb1-bcm91250a versions 2.6.26-2 linux-headers-2.6.26-2-all-ia64 versions 2.6.26-2 linux-image-2.6.26-2-sb1a-bcm91480b versions 2.6.26-2 linux-headers-2.6.26-2-alpha-legacy versions 2.6.26-2 linux-image-2.6.26-2-openvz-686 versions 2.6.26-2 linux-headers-2.6.26-2-footbridge versions 2.6.26-2 linux-support-2.6.26-2 versions 2.6.26-2 linux-image-2.6.26-2-alpha-legacy versions 2.6.26-2 linux-headers-2.6.26-2-powerpc versions 2.6.26-2 linux-headers-2.6.26-2-s390x versions 2.6.26-2 linux-headers-2.6.26-2-all-armel versions 2.6.26-2 linux-headers-2.6.26-2-parisc64 versions 2.6.26-2 linux-headers-2.6.26-2-sb1a-bcm91480b versions 2.6.26-2 linux-headers-2.6.26-2-vserver-mckinley versions 2.6.26-2 linux-libc-dev versions 2.6.26 linux-image-2.6.26-2-vserver-mckinley versions 2.6.26-2 linux-headers-2.6.26-2-common-vserver versions 2.6.26-2 linux-headers-2.6.26-2-common-openvz versions 2.6.26-2 linux-headers-2.6.26-2-common versions 2.6.26-2 linux-image-2.6.26-2-sb1-bcm91250a versions 2.6.26-2 linux-image-2.6.26-2-s390 versions 2.6.26-2

Description The issue is related to multiple vulnerabilities in the Linux kernel, specifically in the fs/namei.c file, which may allow attackers to have an unknown impact. The vulnerabilities can be exploited remotely and may lead to a disruption of protected information. The affected Linux kernel versions range from 2.6.18 to 2.6.34.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Memory Corruption

Race Condition

NULL Pointer Dereference

Weakness Enumeration

CWE-264

CWE-399

CWE-20

CWE-787

CWE-362

CWE-476

Related Identifiers

BDU:2015-01013

BDU:2015-01014

BDU:2015-01015

BDU:2015-01016

BDU:2015-01017

BDU:2015-01018

BDU:2015-01019

BDU:2015-01020

BDU:2015-01021

BDU:2015-01022

BDU:2015-01023

BDU:2015-01024

BDU:2015-01025

BDU:2015-01026

BDU:2015-01027

BDU:2015-01028

BDU:2015-01029

BDU:2015-01030

BDU:2015-01031

BDU:2015-01032

BDU:2015-01033

BDU:2015-01034

BDU:2015-01035

BDU:2015-01036

BDU:2015-01037

BDU:2015-01038

BDU:2015-01039

BDU:2015-01040

BDU:2015-01041

BDU:2015-01042

BDU:2015-01043

BDU:2015-01044

BDU:2015-01045

BDU:2015-01046

BDU:2015-01047

BDU:2015-01048

BDU:2015-01049

BDU:2015-01050

BDU:2015-01053

BDU:2015-01054

BDU:2015-01055

BDU:2015-01056

BDU:2015-01057

BDU:2015-01058

BDU:2015-01059

BDU:2015-01060

BDU:2015-01061

BDU:2015-01062

BDU:2015-01063

BDU:2015-01064

BDU:2015-01065

BDU:2015-01066

BDU:2015-01067

BDU:2015-01068

BDU:2015-01069

BDU:2015-01070

BDU:2015-01071

BDU:2015-01072

BDU:2015-01073

BDU:2015-01074

BDU:2015-01075

BDU:2015-01076

BDU:2015-01077

BDU:2015-01078

BDU:2015-01079

BDU:2015-01080

BDU:2015-01081

BDU:2015-01082

BDU:2015-01083

BDU:2015-01084

BDU:2015-01085

BDU:2015-01086

BDU:2015-01087

BDU:2015-01088

BDU:2015-01089

BDU:2015-01090

BDU:2015-01091

BDU:2015-01092

BDU:2015-01093

BDU:2015-01094

BDU:2015-01095

BDU:2015-01096

BDU:2015-01097

BDU:2015-01098

BDU:2015-01099

BDU:2015-01100

BDU:2015-01101

BDU:2015-01102

BDU:2015-01103

BDU:2015-01104

BDU:2015-01105

BDU:2015-01106

BDU:2015-01107

BDU:2015-01108

BDU:2015-01109

BDU:2015-01110

BDU:2015-01111

BDU:2015-01112

BDU:2015-01113

BDU:2015-01114

BDU:2015-01115

BDU:2015-01116

BDU:2015-01117

BDU:2015-01118

BDU:2015-01119

BDU:2015-01120

BDU:2015-01121

BDU:2015-01122

BDU:2015-01123

BDU:2015-01124

BDU:2015-01125

BDU:2015-01126

BDU:2015-01127

BDU:2015-01128

BDU:2015-01129

BDU:2015-01130

BDU:2015-01131

CVE-2010-1088

DSA-2053-1

RHSA-2010:0504

RHSA-2010:0631

RHSA-2010_0504

Affected Products

Linux

Red Hat

References · 167

• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=ac278a9c505092dd82077a2446af8f9fc0d9c095 · Exploit
• https://bdu.fstec.ru/vul/2015-01040 · Security Note
• https://bdu.fstec.ru/vul/2015-01056 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=567813 · Patch
• https://bdu.fstec.ru/vul/2015-01066 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-1088 · Security Note
• https://bdu.fstec.ru/vul/2015-01127 · Security Note
• https://bdu.fstec.ru/vul/2015-01067 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1187 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1446 · Security Note
• https://bdu.fstec.ru/vul/2015-01034 · Security Note
• https://bdu.fstec.ru/vul/2015-01088 · Security Note
• https://bdu.fstec.ru/vul/2015-01101 · Security Note
• https://bdu.fstec.ru/vul/2015-01033 · Security Note
• https://bdu.fstec.ru/vul/2015-01122 · Security Note