Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.2
CVE-2010-4157: Linux kernel 64‑bit can crash from oversized ioctl
CVE-2010-4157 · published 15 years ago
Summary
The Linux kernel versions before 2.6.36.1 on 64‑bit computers have a coding error that can be triggered by a user who sends an unusually large request. This can corrupt memory and cause the system to stop working, potentially leading to a crash. Updating the kernel to the latest version or applying the vendor’s patch will prevent the issue.
What to do
- Update linux linux_kernel to version 2.6.36.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| linux | linux_kernel |
< 2.6.36.1 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:x64:* |
| fedoraproject | fedora |
13 cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:* |
| opensuse | opensuse |
11.2 11.3 cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:* |
| suse | linux_enterprise_desktop |
10 11 cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:* |
| suse | linux_enterprise_real_time_extension |
11 cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp1:*:*:*:*:*:* |
| suse | linux_enterprise_server |
9 10 11 cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:* |
| suse | linux_enterprise_software_development_kit |
10 cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3:*:*:*:*:*:* |
Original advisory text
Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or po...
Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large argument in an ioctl call.
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=...
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.h... Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html Mailing List Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html Mailing List Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html Mailing List Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html Mailing List Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing List Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html Mailing List Third Party Advisory
- http://ns3.spinics.net/lists/linux-scsi/msg47361.html Broken Link
- http://openwall.com/lists/oss-security/2010/11/09/1 Mailing List Patch Third Party Advisory
- http://openwall.com/lists/oss-security/2010/11/09/3 Mailing List Patch Third Party Advisory
- http://openwall.com/lists/oss-security/2010/11/09/4 Exploit Mailing List Patch Third Party Advisory
- http://openwall.com/lists/oss-security/2010/11/09/5 Mailing List Third Party Advisory
- http://openwall.com/lists/oss-security/2010/11/10/12 Mailing List Patch Third Party Advisory
- http://secunia.com/advisories/42745 Third Party Advisory
- http://secunia.com/advisories/42778 Third Party Advisory
- http://secunia.com/advisories/42789 Third Party Advisory
- http://secunia.com/advisories/42801 Third Party Advisory
- http://secunia.com/advisories/42932 Third Party Advisory
- http://secunia.com/advisories/42963 Third Party Advisory
- http://secunia.com/advisories/43291 Third Party Advisory
- http://secunia.com/advisories/46397 Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.1 Broken Link
- http://www.redhat.com/support/errata/RHSA-2010-0958.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2011-0004.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2011-0162.html Third Party Advisory
- http://www.securityfocus.com/archive/1/520102/100/0/threaded Third Party Advisory VDB Entry
- http://www.securityfocus.com/bid/44648 Third Party Advisory VDB Entry
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory
- http://www.vupen.com/english/advisories/2010/3321 Third Party Advisory
- http://www.vupen.com/english/advisories/2011/0012 Third Party Advisory
- http://www.vupen.com/english/advisories/2011/0024 Third Party Advisory
- http://www.vupen.com/english/advisories/2011/0124 Third Party Advisory
- http://www.vupen.com/english/advisories/2011/0168 Third Party Advisory
- http://www.vupen.com/english/advisories/2011/0298 Third Party Advisory
- http://www.vupen.com/english/advisories/2011/0375 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=651147 Issue Tracking Patch Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
6.2
Medium
Type
CWE-190Integer Overflow
Timeline
Published10 Dec 2010
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2010-4157 · NVD
Track software like this
Free during beta