CVE-2010-2954 — NULL Pointer Dereference in Kernel

Vendor	Product	Version range	Fixed in
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
linux	linux_kernel	< 2.6.36	2.6.36
linux	linux_kernel	—	—
opensuse	opensuse	—	—
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_server	—	—

Ubuntu

Linux kernel (OMAP4) vulnerabilities

vendor_ubuntu·2011-04-20·CVSS 4.9

CVE-2010-2954 [MEDIUM] Linux kernel (OMAP4) vulnerabilities Title: Linux kernel (OMAP4) vulnerabilities Summary: Multiple security flaws have been fixed in the OMAP4 port of the Linux kernel. Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. (CVE-2010-3904) Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service via a NULL pointer dereference, escalate privileges by overflowing the kernel stack, and assign Econet addresses to arbitrary interfaces. (CVE-2010-3848, CVE-2010-3849, CVE-2010-3850) Ben Hawkes discovered that the Linux kernel did not correctly validate memory ranges on 64bit kernels when allocating memory on behalf of 32bit system calls. On a 64bit system, a lo

Ubuntu

Linux Kernel vulnerabilities (Marvell Dove)

vendor_ubuntu·2011-03-25·CVSS 7.2

CVE-2010-2478 [HIGH] Linux Kernel vulnerabilities (Marvell Dove) Title: Linux Kernel vulnerabilities (Marvell Dove) Summary: An attacker could send crafted input to the kernel and cause it to crash. Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. (CVE-2010-3904) Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service via a NULL pointer dereference, escalate privileges by overflowing the kernel stack, and assign Econet addresses to arbitrary interfaces. (CVE-2010-3848, CVE-2010-3849, CVE-2010-3850) Ben Hutchings discovered that the ethtool interface did not correctly check certain sizes. A local attacker could perform malicious ioctl calls that could crash the system, leadin

Ubuntu

Linux kernel vulnerabilities

vendor_ubuntu·2011-03-03·CVSS 4.7

CVE-2009-4895 [MEDIUM] Linux kernel vulnerabilities Title: Linux kernel vulnerabilities Summary: Multiple kernel flaws. Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. (CVE-2010-3904) Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service via a NULL pointer dereference, escalate privileges by overflowing the kernel stack, and assign Econet addresses to arbitrary interfaces. (CVE-2010-3848, CVE-2010-3849, CVE-2010-3850) Ben Hawkes discovered that the Linux kernel did not correctly filter registers on 64bit kernels when performing 32bit system calls. On a 64bit system, a local attacker could manipulate 32bit system calls to gain root privileges. (CVE-2010-3301)

Ubuntu

Linux kernel vulnerabilities

vendor_ubuntu·2011-02-28·CVSS 4.7

CVE-2009-4895 [MEDIUM] Linux kernel vulnerabilities Title: Linux kernel vulnerabilities Summary: Multiple kernel flaws. Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. (CVE-2010-3904) Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service via a NULL pointer dereference, escalate privileges by overflowing the kernel stack, and assign Econet addresses to arbitrary interfaces. (CVE-2010-3848, CVE-2010-3849, CVE-2010-3850) Ben Hawkes discovered that the Linux kernel did not correctly filter registers on 64bit kernels when performing 32bit system calls. On a 64bit system, a local attacker could manipulate 32bit system calls to gain root privileges. (CVE-2010-3301)

Ubuntu

Linux kernel vulnerabilities

vendor_ubuntu·2011-02-25·CVSS 4.7

CVE-2009-4895 [MEDIUM] Linux kernel vulnerabilities Title: Linux kernel vulnerabilities Summary: Multiple kernel flaws. Al Viro discovered a race condition in the TTY driver. A local attacker could exploit this to crash the system, leading to a denial of service. (CVE-2009-4895) Dan Rosenberg discovered that the MOVE_EXT ext4 ioctl did not correctly check file permissions. A local attacker could overwrite append-only files, leading to potential data loss. (CVE-2010-2066) Dan Rosenberg discovered that the swapexit xfs ioctl did not correctly check file permissions. A local attacker could exploit this to read from write-only files, leading to a loss of privacy. (CVE-2010-2226) Gael Delalleu, Rafal Wojtczuk, and Brad Spengler discovered that the memory manager did not properly handle when applications grow stacks into adjacent memory regi

Ubuntu

Linux kernel vulnerabilities

vendor_ubuntu·2010-10-19·CVSS 4.7

CVE-2010-2525 [MEDIUM] Linux kernel vulnerabilities Title: Linux kernel vulnerabilities Summary: Multiple security issues fixed. Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. (CVE-2010-3904) Al Viro discovered a race condition in the TTY driver. A local attacker could exploit this to crash the system, leading to a denial of service. (CVE-2009-4895) Dan Rosenberg discovered that the MOVE_EXT ext4 ioctl did not correctly check file permissions. A local attacker could overwrite append-only files, leading to potential data loss. (CVE-2010-2066) Dan Rosenberg discovered that the swapexit xfs ioctl did not correctly check file permissions. A local attacker could exploit this to read from write-only files, leading to a loss of privac

Red Hat

kernel: NULL deref and panic in irda

vendor_redhat·2010-08-31·CVSS 4.9

CVE-2010-2954 [MEDIUM] CWE-476 kernel: NULL deref and panic in irda kernel: NULL deref and panic in irda The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap function, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via multiple unsuccessful calls to bind on an AF_IRDA (aka PF_IRDA) socket. Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG as it did not include support for the IrDA protocol.

GHSA

GHSA-j38m-3grr-2p9j: The irda_bind function in net/irda/af_irda

ghsa_unreviewed·2022-05-13

CVE-2010-2954 [MEDIUM] CWE-476 GHSA-j38m-3grr-2p9j: The irda_bind function in net/irda/af_irda The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap function, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via multiple unsuccessful calls to bind on an AF_IRDA (aka PF_IRDA) socket.

CVE-2010-2954: The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap…

Affected