Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-2963 — Improper Input Validation in Kernel

CWE-20 — Improper Input Validation15 documents8 sources
Severity
6.2MEDIUMNVD
EPSS
0.1%
top 71.38%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
7
Linux KernelCanonical Ubuntu LinuxDebian Linux+4 more
Timeline
PublishedNov 26
Latest updateMay 13

Description

drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on 64-bit platforms does not validate the destination of a memory copy operation, which allows local users to write to arbitrary kernel memory locations, and consequently gain privileges, via a VIDIOCSTUNER ioctl call on a /dev/video device, followed by a VIDIOCSMICROCODE ioctl call on this device.

CVSS vector

AV:L/AC:H/C:C/I:C/A:CExploitability: 1.9 | Impact: 10.0

Affected Packages4 packages

▶NVDlinux/linux_kernel< 2.6.36
▶NVDopensuse/opensuse11.2, 11.3+1

Also affects: Debian Linux 5.0, Ubuntu Linux 10.04, 10.10, 6.06, 8.04, 9.04, 9.10, Fedora 13

Patches

Patch: bugzilla.redhat.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-7276-wmh7-g227: drivers/media/video/v4l2-compat-ioctl32↗2022-05-13
▶
Kernel
x86/entry: Add STACKLEAK erasing the kernel stack at the end of syscalls↗2018-08-17
▶
CVEList
CVE-2010-2963: drivers/media/video/v4l2-compat-ioctl32↗2010-11-26
▶

💥Exploits & PoCs

1
Exploit-DB
Linux Kernel 2.6.36 - VIDIOCSMICROCODE IOCTL Local Memory Overwrite↗2010-10-28
▶

📋Vendor Advisories

7
Ubuntu
Linux kernel (OMAP4) vulnerabilities↗2011-04-20
▶
Ubuntu
Linux Kernel vulnerabilities (Marvell Dove)↗2011-03-25
▶
Ubuntu
Linux kernel vulnerabilities↗2011-03-03
▶
Ubuntu
Linux kernel vulnerabilities↗2011-02-28
▶
Ubuntu
Linux kernel vulnerabilities↗2011-02-25
▶

💬Community

3
Bugzilla
CVE-2010-2963 kernel: v4l: VIDIOCSMICROCODE arbitrary write [mrg-1.3]↗2010-10-13
▶
Bugzilla
CVE-2010-2963 kernel: v4l: VIDIOCSMICROCODE arbitrary write [rhel-5.5.z]↗2010-10-13
▶
Bugzilla
CVE-2010-2963 kernel: v4l: VIDIOCSMICROCODE arbitrary write↗2010-10-13
▶
CVE-2010-2963 — Improper Input Validation in Kernel | cvebase