CVE-2010-2524: High severity linux kernel vulnerability
Description of problem: CIFS has the ability to chase MS-DFS referrals. In order to do this it has to be able to resolve hostnames into IP addresses. For this, it uses the keys API to upcall to the cifs.upcall userspace helper. It then resolves the name and hands the address back to the kernel.
The dnsresolver upcall currently used by CIFS is susceptible to cache stuffing. It's possible for a malicious user to stuff the keyring with the results of a lookup, and then trick the server into mounting a server of his choosing.
Other sources
The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIGCIFSDFSUPCALL is enabled, relies on a user's keyring for the dnsresolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform arbitrary CIFS mounts via vectors involving an addkey call, related to a "cache stuffing" issue and MS-DFS referrals.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2524?
CVE-2010-2524 has a medium severity rating due to potential security implications in CIFS handling of MS-DFS referrals.
How do I fix CVE-2010-2524?
To fix CVE-2010-2524, ensure your system is updated with the latest kernel patches that address this vulnerability.
Which systems are affected by CVE-2010-2524?
CVE-2010-2524 affects various versions of the Linux kernel and VMware ESX, along with several Ubuntu and SUSE Linux distributions.
What are the implications of CVE-2010-2524?
CVE-2010-2524 could potentially allow an attacker to exploit the CIFS functionality, leading to unauthorized access or denial of service.
Is CVE-2010-2524 still a concern in modern systems?
While CVE-2010-2524 was a notable vulnerability, modern systems with updated kernels should have mitigated its risks significantly.