CVE-2010-3081
Fixed in a distro release EPSS 4%
The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.
Products: linux_kernel, vmware esx, suse_linux_enterprise_desktop, suse_linux_enterprise_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-25lenny1 |
| Red Hat Enterprise Linux 4 | kernel | 0:2.6.9-89.29.1.EL |
| Red Hat Enterprise Linux 4 | kernel-debuginfo | 0:2.6.9-89.29.1.EL |
| Red Hat Enterprise Linux 4 | kernel-devel | 0:2.6.9-89.29.1.EL |
| Red Hat Enterprise Linux 4 | kernel-doc | 0:2.6.9-89.29.1.EL |
| Red Hat Enterprise Linux 4 | kernel-hugemem | 0:2.6.9-89.29.1.EL |
| Red Hat Enterprise Linux 4 | kernel-hugemem-devel | 0:2.6.9-89.29.1.EL |
| Red Hat Enterprise Linux 4 | kernel-largesmp | 0:2.6.9-89.29.1.EL |
| Red Hat Enterprise Linux 4 | kernel-largesmp-devel | 0:2.6.9-89.29.1.EL |
| Red Hat Enterprise Linux 4 | kernel-smp | 0:2.6.9-89.29.1.EL |
| Red Hat Enterprise Linux 4 | kernel-smp-devel | 0:2.6.9-89.29.1.EL |
| Red Hat Enterprise Linux 4 | kernel-xenU | 0:2.6.9-89.29.1.EL |
| Red Hat Enterprise Linux 4 | kernel-xenU-devel | 0:2.6.9-89.29.1.EL |
| Red Hat Enterprise Linux 5 | kernel | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-PAE | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-PAE-debuginfo | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-PAE-devel | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-debug | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-debug-debuginfo | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-debug-devel | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-debuginfo | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-debuginfo-common | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-devel | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-doc | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-headers | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-kdump | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-kdump-debuginfo | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-kdump-devel | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-xen | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-xen-debuginfo | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 5 | kernel-xen-devel | 0:2.6.18-194.11.4.el5 |
| Red Hat Enterprise Linux 6 | kernel | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-bootwrapper | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-debug | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-debug-debuginfo | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-debug-devel | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-debuginfo | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-debuginfo-common-i686 | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-debuginfo-common-ppc64 | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-debuginfo-common-s390x | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-debuginfo-common-x86_64 | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-devel | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-doc | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-firmware | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-headers | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-kdump | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-kdump-debuginfo | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | kernel-kdump-devel | 0:2.6.32-71.7.1.el6 |
| Red Hat Enterprise Linux 6 | perf | 0:2.6.32-71.7.1.el6 |
| Red Hat enterprise mrg 1 | kernel-rt | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debug | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debug-debuginfo | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debug-devel | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debuginfo | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debuginfo-common | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-devel | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-doc | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-trace | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-trace-debuginfo | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-trace-devel | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-vanilla | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-vanilla-debuginfo | 0:2.6.24.7-169.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-vanilla-devel | 0:2.6.24.7-169.el5rt |
| Red Hat rhel els 3 | kernel | 0:2.4.21-66.EL |
| Red Hat rhel els 3 | kernel-BOOT | 0:2.4.21-66.EL |
| Red Hat rhel els 3 | kernel-debuginfo | 0:2.4.21-66.EL |
| Red Hat rhel els 3 | kernel-doc | 0:2.4.21-66.EL |
| Red Hat rhel els 3 | kernel-hugemem | 0:2.4.21-66.EL |
| Red Hat rhel els 3 | kernel-hugemem-unsupported | 0:2.4.21-66.EL |
| Red Hat rhel els 3 | kernel-smp | 0:2.4.21-66.EL |
| Red Hat rhel els 3 | kernel-smp-unsupported | 0:2.4.21-66.EL |
| Red Hat rhel els 3 | kernel-source | 0:2.4.21-66.EL |
| Red Hat rhel els 3 | kernel-unsupported | 0:2.4.21-66.EL |
| Red Hat rhel eus 4.7 | kernel | 0:2.6.9-78.0.33.EL |
| Red Hat rhel eus 4.7 | kernel-debuginfo | 0:2.6.9-78.0.33.EL |
| Red Hat rhel eus 4.7 | kernel-devel | 0:2.6.9-78.0.33.EL |
| Red Hat rhel eus 4.7 | kernel-doc | 0:2.6.9-78.0.33.EL |
| Red Hat rhel eus 4.7 | kernel-hugemem | 0:2.6.9-78.0.33.EL |
| Red Hat rhel eus 4.7 | kernel-hugemem-devel | 0:2.6.9-78.0.33.EL |
| Red Hat rhel eus 4.7 | kernel-largesmp | 0:2.6.9-78.0.33.EL |
| Red Hat rhel eus 4.7 | kernel-largesmp-devel | 0:2.6.9-78.0.33.EL |
| Red Hat rhel eus 4.7 | kernel-smp | 0:2.6.9-78.0.33.EL |
| Red Hat rhel eus 4.7 | kernel-smp-devel | 0:2.6.9-78.0.33.EL |
| Red Hat rhel eus 4.7 | kernel-xenU | 0:2.6.9-78.0.33.EL |
| Red Hat rhel eus 4.7 | kernel-xenU-devel | 0:2.6.9-78.0.33.EL |
| Red Hat rhel eus 5.3 | kernel | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-PAE | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-PAE-debuginfo | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-PAE-devel | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-debug | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-debug-debuginfo | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-debug-devel | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-debuginfo | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-debuginfo-common | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-devel | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-doc | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-headers | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-kdump | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-kdump-debuginfo | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-kdump-devel | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-xen | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-xen-debuginfo | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.3 | kernel-xen-devel | 0:2.6.18-128.23.2.el5 |
| Red Hat rhel eus 5.4 | kernel | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-PAE | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-PAE-debuginfo | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-PAE-devel | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-debug | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-debug-debuginfo | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-debug-devel | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-debuginfo | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-debuginfo-common | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-devel | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-doc | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-headers | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-kdump | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-kdump-debuginfo | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-kdump-devel | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-xen | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-xen-debuginfo | 0:2.6.18-164.25.2.el5 |
| Red Hat rhel eus 5.4 | kernel-xen-devel | 0:2.6.18-164.25.2.el5 |
| openSUSE Tumbleweed | kernel-source | 4.8.13-1.1 |