CWE
NVD-CWE-Other
Advisory Published
CVE Published
Updated

CVE-2010-0415

First published: Sun Feb 07 2010(Updated: )

Description of problem: Ramon de C. Valle spotted a problem in sys_move_pages, where "node" value is read from userspace, but not limited to the node set within the kernel itself. Due to the bit tests in mm/migrate.c:do_move_pages it is easy to read out the kernel memory (as node can also be negative). (The node_isset and node_state functions just map to test_bit, which has no limiter in the normal implementations.) There also is (in my eyes) the chance we can corrupt kernel memory later on if we have all the right bits setup, but I did not research this further. Issue was present starting as sys_move_pages was introduced in 2.6.18. Solved in mainline by commit below. commit 6f5a55f1a6c5abee15a0e878e5c74d9f1569b8b0 Author: Linus Torvalds <torvalds> Date: Fri Feb 5 16:16:50 2010 -0800 Fix potential crash with sys_move_pages We incorrectly depended on the 'node_state/node_isset()' functions testing the node range, rather than checking it explicitly. That's not reliable, even if it might often happen to work. So do the proper explicit test. Reported-by: Marcus Meissner <meissner> Acked-and-tested-by: Brice Goglin <Brice.Goglin> Acked-by: Hugh Dickins <hugh.dickins.uk> Cc: stable Signed-off-by: Linus Torvalds <torvalds> Acknowledgements: Red Hat would like to thank Ramon de C. Valle for reporting this issue.

Credit: secalert@redhat.com

Affected SoftwareAffected VersionHow to fix
Linux kernel=2.6.11
Linux kernel=2.6.23.4
Linux kernel=2.6.16.16
Linux kernel=2.6.18.7
Linux kernel=2.6.17.12
Linux kernel=2.6.16.9
Linux kernel=2.6.17.9
Linux kernel=2.6.11.2
Linux kernel=2.6.5
Linux kernel=2.6.15.3
Linux kernel=2.6.11.10
Linux kernel=2.6.1
Linux kernel=2.6.16.6
Linux kernel=2.6.16.8
Linux kernel=2.6.22.4
Linux kernel=2.6.14.7
Linux kernel=2.6.13
Linux kernel=2.6.17.2
Linux kernel=2.6.13.3
Linux kernel=2.6.11.8
Linux kernel=2.6.23.7
Linux kernel=2.6.17.8
Linux kernel=2.6.14.4
Linux kernel=2.6.14
Linux kernel=2.6.17.4
Linux kernel=2.6.16.18
Linux kernel=2.6.17.14
Linux kernel=2.6.10
Linux kernel=2.6.14.3
Linux kernel=2.6.24-rc3
Linux kernel=2.6.18.3
Linux kernel=2.6.11.6
Linux kernel=2.6.11.11
Linux kernel=2.6.16.13
Linux kernel=2.6.3
Linux kernel=2.6.32
Linux kernel=2.6.16.4
Linux kernel=2.6.17.3
Linux kernel=2.6.32.3
Linux kernel=2.6.22
Linux kernel=2.6.4
Linux kernel=2.6.16.15
Linux kernel=2.6.15.6
Linux kernel=2.6.24-rc5
Linux kernel=2.6.15.1
Linux kernel=2.6.11.5
Linux kernel=2.6.18.4
Linux kernel=2.6.33-rc1
Linux kernel=2.6.16.1
Linux kernel=2.6.18.1
Linux kernel=2.6.23.1
Linux kernel=2.6.2
Linux kernel=2.6.14.5
Linux kernel=2.6.13.2
Linux kernel=2.6.17.5
Linux kernel=2.6.24-rc4
Linux kernel=2.6.18.5
Linux kernel=2.6.13.5
Linux kernel=2.6.17
Linux kernel=2.6.16.11
Linux kernel=2.6.16.14
Linux kernel<=2.6.33
Linux kernel=2.6.33-rc2
Linux kernel=2.6.16.25
Linux kernel=2.6.16.21
Linux kernel=2.6.8
Linux kernel=2.6.16.28
Linux kernel=2.6.17.10
Linux kernel=2.6.14.1
Linux kernel=2.6.16.23
Linux kernel=2.6.12.5
Linux kernel=2.6.15.7
Linux kernel=2.6.22.7
Linux kernel=2.6.16.3
Linux kernel=2.6.24-rc1
Linux kernel=2.6.14.6
Linux kernel=2.6.12.1
Linux kernel=2.6.11.9
Linux kernel=2.6.17.1
Linux kernel=2.6.0
Linux kernel=2.6.13.4
Linux kernel=2.6.23-rc2
Linux kernel=2.6.22.6
Linux kernel=2.6.23.3
Linux kernel=2.6.18.8
Linux kernel=2.6.22.3
Linux kernel=2.6.12.2
Linux kernel=2.6.16.31
Linux kernel=2.6.16.26
Linux kernel=2.6.18.2
Linux kernel=2.6.16.29
Linux kernel=2.6.23-rc1
Linux kernel=2.6.16
Linux kernel=2.6.15.2
Linux kernel=2.6.16.22
Linux kernel=2.6.17.11
Linux kernel=2.6.16.10
Linux kernel=2.6.12.4
Linux kernel=2.6.11.3
Linux kernel=2.6.16.24
Linux kernel=2.6.23
Linux kernel=2.6.12.3
Linux kernel=2.6.23.2
Linux kernel=2.6.7
Linux kernel=2.6.32.4
Linux kernel=2.6.16.30
Linux kernel=2.6.15.4
Linux kernel=2.6.24-rc2
Linux kernel=2.6.16.17
Linux kernel=2.6.16.12
Linux kernel<=2.6.33
Linux kernel=2.6.16.27
Linux kernel=2.6.12.6
Linux kernel=2.6.17.7
Linux kernel=2.6.11.7
Linux kernel=2.6.16.2
Linux kernel=2.6.18.6
Linux kernel=2.6.15
Linux kernel=2.6.33-rc4
Linux kernel=2.6.23.5
Linux kernel=2.6.32.2
Linux kernel=2.6.17.6
Linux kernel=2.6.23.6
Linux kernel=2.6.16.7
Linux kernel=2.6.32.1
Linux kernel=2.6.17.13
Linux kernel=2.6.22.2
Linux kernel=2.6.8.1
Linux kernel=2.6.22.5
Linux kernel=2.6.16.5
Linux kernel=2.6.11.4
Linux kernel=2.6.16.19
Linux kernel=2.6.11.12
Linux kernel=2.6.16.20
Linux kernel=2.6.15.5
Linux kernel=2.6.11.1
Linux kernel=2.6.33-rc5
Linux kernel=2.6.9
Linux kernel=2.6.13.1
Linux kernel=2.6.6
Linux kernel=2.6.12
Linux Kernel<=2.6.33
Linux Kernel<=2.6.33
Linux Kernel=2.6.0
Linux Kernel=2.6.1
Linux Kernel=2.6.2
Linux Kernel=2.6.3
Linux Kernel=2.6.4
Linux Kernel=2.6.5
Linux Kernel=2.6.6
Linux Kernel=2.6.7
Linux Kernel=2.6.8
Linux Kernel=2.6.8.1
Linux Kernel=2.6.9
Linux Kernel=2.6.10
Linux Kernel=2.6.11
Linux Kernel=2.6.11.1
Linux Kernel=2.6.11.2
Linux Kernel=2.6.11.3
Linux Kernel=2.6.11.4
Linux Kernel=2.6.11.5
Linux Kernel=2.6.11.6
Linux Kernel=2.6.11.7
Linux Kernel=2.6.11.8
Linux Kernel=2.6.11.9
Linux Kernel=2.6.11.10
Linux Kernel=2.6.11.11
Linux Kernel=2.6.11.12
Linux Kernel=2.6.12
Linux Kernel=2.6.12.1
Linux Kernel=2.6.12.2
Linux Kernel=2.6.12.3
Linux Kernel=2.6.12.4
Linux Kernel=2.6.12.5
Linux Kernel=2.6.12.6
Linux Kernel=2.6.13
Linux Kernel=2.6.13.1
Linux Kernel=2.6.13.2
Linux Kernel=2.6.13.3
Linux Kernel=2.6.13.4
Linux Kernel=2.6.13.5
Linux Kernel=2.6.14
Linux Kernel=2.6.14.1
Linux Kernel=2.6.14.3
Linux Kernel=2.6.14.4
Linux Kernel=2.6.14.5
Linux Kernel=2.6.14.6
Linux Kernel=2.6.14.7
Linux Kernel=2.6.15
Linux Kernel=2.6.15.1
Linux Kernel=2.6.15.2
Linux Kernel=2.6.15.3
Linux Kernel=2.6.15.4
Linux Kernel=2.6.15.5
Linux Kernel=2.6.15.6
Linux Kernel=2.6.15.7
Linux Kernel=2.6.16
Linux Kernel=2.6.16.1
Linux Kernel=2.6.16.2
Linux Kernel=2.6.16.3
Linux Kernel=2.6.16.4
Linux Kernel=2.6.16.5
Linux Kernel=2.6.16.6
Linux Kernel=2.6.16.7
Linux Kernel=2.6.16.8
Linux Kernel=2.6.16.9
Linux Kernel=2.6.16.10
Linux Kernel=2.6.16.11
Linux Kernel=2.6.16.12
Linux Kernel=2.6.16.13
Linux Kernel=2.6.16.14
Linux Kernel=2.6.16.15
Linux Kernel=2.6.16.16
Linux Kernel=2.6.16.17
Linux Kernel=2.6.16.18
Linux Kernel=2.6.16.19
Linux Kernel=2.6.16.20
Linux Kernel=2.6.16.21
Linux Kernel=2.6.16.22
Linux Kernel=2.6.16.23
Linux Kernel=2.6.16.24
Linux Kernel=2.6.16.25
Linux Kernel=2.6.16.26
Linux Kernel=2.6.16.27
Linux Kernel=2.6.16.28
Linux Kernel=2.6.16.29
Linux Kernel=2.6.16.30
Linux Kernel=2.6.16.31
Linux Kernel=2.6.17
Linux Kernel=2.6.17.1
Linux Kernel=2.6.17.2
Linux Kernel=2.6.17.3
Linux Kernel=2.6.17.4
Linux Kernel=2.6.17.5
Linux Kernel=2.6.17.6
Linux Kernel=2.6.17.7
Linux Kernel=2.6.17.8
Linux Kernel=2.6.17.9
Linux Kernel=2.6.17.10
Linux Kernel=2.6.17.11
Linux Kernel=2.6.17.12
Linux Kernel=2.6.17.13
Linux Kernel=2.6.17.14
Linux Kernel=2.6.18.1
Linux Kernel=2.6.18.2
Linux Kernel=2.6.18.3
Linux Kernel=2.6.18.4
Linux Kernel=2.6.18.5
Linux Kernel=2.6.18.6
Linux Kernel=2.6.18.7
Linux Kernel=2.6.18.8
Linux Kernel=2.6.22
Linux Kernel=2.6.22.2
Linux Kernel=2.6.22.3
Linux Kernel=2.6.22.4
Linux Kernel=2.6.22.5
Linux Kernel=2.6.22.6
Linux Kernel=2.6.22.7
Linux Kernel=2.6.23
Linux Kernel=2.6.23-rc1
Linux Kernel=2.6.23-rc2
Linux Kernel=2.6.23.1
Linux Kernel=2.6.23.2
Linux Kernel=2.6.23.3
Linux Kernel=2.6.23.4
Linux Kernel=2.6.23.5
Linux Kernel=2.6.23.6
Linux Kernel=2.6.23.7
Linux Kernel=2.6.24-rc1
Linux Kernel=2.6.24-rc2
Linux Kernel=2.6.24-rc3
Linux Kernel=2.6.24-rc4
Linux Kernel=2.6.24-rc5
Linux Kernel=2.6.32
Linux Kernel=2.6.32.1
Linux Kernel=2.6.32.2
Linux Kernel=2.6.32.3
Linux Kernel=2.6.32.4
Linux Kernel=2.6.33-rc1
Linux Kernel=2.6.33-rc2
Linux Kernel=2.6.33-rc4
Linux Kernel=2.6.33-rc5
<=2.6.33
<=2.6.33
=2.6.0
=2.6.1
=2.6.2
=2.6.3
=2.6.4
=2.6.5
=2.6.6
=2.6.7
=2.6.8
=2.6.8.1
=2.6.9
=2.6.10
=2.6.11
=2.6.11.1
=2.6.11.2
=2.6.11.3
=2.6.11.4
=2.6.11.5
=2.6.11.6
=2.6.11.7
=2.6.11.8
=2.6.11.9
=2.6.11.10
=2.6.11.11
=2.6.11.12
=2.6.12
=2.6.12.1
=2.6.12.2
=2.6.12.3
=2.6.12.4
=2.6.12.5
=2.6.12.6
=2.6.13
=2.6.13.1
=2.6.13.2
=2.6.13.3
=2.6.13.4
=2.6.13.5
=2.6.14
=2.6.14.1
=2.6.14.3
=2.6.14.4
=2.6.14.5
=2.6.14.6
=2.6.14.7
=2.6.15
=2.6.15.1
=2.6.15.2
=2.6.15.3
=2.6.15.4
=2.6.15.5
=2.6.15.6
=2.6.15.7
=2.6.16
=2.6.16.1
=2.6.16.2
=2.6.16.3
=2.6.16.4
=2.6.16.5
=2.6.16.6
=2.6.16.7
=2.6.16.8
=2.6.16.9
=2.6.16.10
=2.6.16.11
=2.6.16.12
=2.6.16.13
=2.6.16.14
=2.6.16.15
=2.6.16.16
=2.6.16.17
=2.6.16.18
=2.6.16.19
=2.6.16.20
=2.6.16.21
=2.6.16.22
=2.6.16.23
=2.6.16.24
=2.6.16.25
=2.6.16.26
=2.6.16.27
=2.6.16.28
=2.6.16.29
=2.6.16.30
=2.6.16.31
=2.6.17
=2.6.17.1
=2.6.17.2
=2.6.17.3
=2.6.17.4
=2.6.17.5
=2.6.17.6
=2.6.17.7
=2.6.17.8
=2.6.17.9
=2.6.17.10
=2.6.17.11
=2.6.17.12
=2.6.17.13
=2.6.17.14
=2.6.18.1
=2.6.18.2
=2.6.18.3
=2.6.18.4
=2.6.18.5
=2.6.18.6
=2.6.18.7
=2.6.18.8
=2.6.22
=2.6.22.2
=2.6.22.3
=2.6.22.4
=2.6.22.5
=2.6.22.6
=2.6.22.7
=2.6.23
=2.6.23-rc1
=2.6.23-rc2
=2.6.23.1
=2.6.23.2
=2.6.23.3
=2.6.23.4
=2.6.23.5
=2.6.23.6
=2.6.23.7
=2.6.24-rc1
=2.6.24-rc2
=2.6.24-rc3
=2.6.24-rc4
=2.6.24-rc5
=2.6.32
=2.6.32.1
=2.6.32.2
=2.6.32.3
=2.6.32.4
=2.6.33-rc1
=2.6.33-rc2
=2.6.33-rc4
=2.6.33-rc5

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2010-0415?

    CVE-2010-0415 is considered a high severity vulnerability due to its potential to allow unauthorized access to kernel memory.

  • How do I fix CVE-2010-0415?

    To fix CVE-2010-0415, it is recommended to upgrade the Linux kernel to a version that contains the appropriate security patches addressing this vulnerability.

  • Which versions of the Linux kernel are affected by CVE-2010-0415?

    CVE-2010-0415 affects various versions of the Linux kernel, including 2.6.11, 2.6.23.4, and multiple other versions within the 2.6.x series.

  • What is the impact of CVE-2010-0415 on system security?

    The impact of CVE-2010-0415 on system security includes the risk of kernel memory exposure, potentially leading to data leakage or system compromise.

  • Is there a workaround for CVE-2010-0415 until a patch is applied?

    A temporary workaround for CVE-2010-0415 may involve disabling the affected features that utilize sys_move_pages, but upgrading the kernel is the best solution.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203