NetSight
IP …
medium4.9

CVE-2010-2954

The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap functio…

Impact

The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap function, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via multiple unsuccessful calls to bind on an AF_IRDA (aka PF_IRDA) socket.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.36
Version 2.6.36
OpensuseOpensuse
Version 11.3
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise Server
Version 11
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.04, 9.10, 10.04, 10.10

Weakness classification

CWE-476

References