PT-2010-5690 · Linux+2 · Linux Kernel+2
Tavis Ormandy
·
Published
1970-01-01
·
Updated
2023-02-13
·
CVE-2010-3086
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
SUSE Linux Enterprise (affected versions not specified)
Linux kernel versions prior to 2.6.25
Description
The issue involves multiple vulnerabilities in the Linux kernel that can lead to a denial of service, causing disruption to the availability of protected information. These vulnerabilities can be exploited remotely. Additionally, there is an issue with the implementation of exception fixup in the
include/asm-x86/futex.h file of the Linux kernel, which allows local users to cause a denial of service via an invalid application that triggers a page fault.Recommendations
For Linux kernel versions prior to 2.6.25, update to version 2.6.25 or later to resolve the issue.
At the moment, there is no information about a newer version of SUSE Linux Enterprise that contains a fix for this vulnerability.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat
Suse Linux Enterprise