NetSight
IP …
high7.8Public exploit code

CVE-2010-3081

The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.35.4
Version 2.6.36
VmwareEsx
Versions 4.0, 4.1
SuseSuse Linux Enterprise Desktop
Version 11
SuseSuse Linux Enterprise Server
Version 11

Weakness classification

CWE-119

References