CVE-2010-3086: Medium severity Linux Linux kernel vulnerability
Description of problem: BUG: unable to handle kernel paging request at virtual address 0028a000 printing eip: c0439751 pde = 2902e067 Oops: 0002 [#1] SMP last sysfs file: /devices/pci0000:00/0000:00:00.0/resource Modules linked in: autofs4 hidp rfcomm l2cap bluetooth lockd sunrpc ipconntracknetbiosns iptREJECT xtstate ipconntrack nfnetlink iptablefilter iptables ip6tREJECT xttcpudp ip6tablefilter ip6tables xtables ipv6 xfrmnalgo cryptoapi vmblock(U) vsock(U) vmmemctl(U) vmhgfs(U) acpiphp dmmirror dmmultipath scsidh video backlight sbs powermeter hwmon i2cec dellwmi wmi button battery asusacpi ac lp floppy sg pcspkr sndens1371 gameport sndrawmidi sndac97codec ac97bus sndseqdummy sndseqoss sndseqmidievent sndseq sndseqdevice sndpcmoss i2cpiix4 i2ccore vmci(U) sndmixeross sndpcm sndtimer snd soundcore sndpagealloc mii parportpc idecd parport cdrom serioraw pvscsi(U) vmxnet3(U) vmxnet(U) dmraid45 dmmessage dmregionhash dmlog dmmod dmmemcache atapiix libata mptspi mptscsih mptbase scsitransportspi sdmod scsimod ext3 jbd uhcihcd ohcihcd ehcihcd CPU: 0 EIP: 0060:[<c0439751>] Tainted: G VLI EFLAGS: 00210246 (2.6.18-194.11.3.el5 #1) EIP is at futexlockpi+0x1ad/0x822 eax: 00000000 ebx: c07bdb10 ecx: 0000128d edx: 00000000 esi: fffffff2 edi: 00000000 ebp: 0028a000 esp: dea9ce08 ds: 007b es: 007b ss: 0068 Process iknowthis (pid: 4749, ti=dea9c000 task=e9620550 task.ti=dea9c000) Stack: d08a2d59 13f631b6 00000000 00000000 00000000 dea9ce78 e9620550 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000001 dea9ce50 dea9ce50 c07bdb10 0028a000 e96bf900 00000000 Call Trace: [<c0438448>] hrtimerwakeup+0x0/0x18 [<c043a953>] dofutex+0xb8d/0xbf6 [<c044bece>] auditsyscallentry+0x15a/0x18c [<c043aacd>] sysfutex+0x111/0x127 [<c0404f17>] syscallcall+0x7/0xb ======================= Code: 89 e0 89 ee 25 00 f0 ff ff 8b 10 8b 8a a8 00 00 00 83 c6 04 19 d2 39 70 18 83 da 00 ff 40 14 85 d2 be f2 ff ff ff 75 09 89 d0 90 <0f> b1 4d 00 89 c6 89 e0 25 00 f0 ff ff ff 48 14 83 fe f2 0f 84 EIP: [<c0439751>] futexlockpi+0x1ad/0x822 SS:ESP 0068:dea9ce08 <0>Kernel panic - not syncing: Fatal exception
Acknowledgements:
Red Hat would like to thank Tavis Ormandy for reporting this issue.
Other sources
include/asm-x86/futex.h in the Linux kernel before 2.6.25 does not properly implement exception fixup, which allows local users to cause a denial of service (panic) via an invalid application that triggers a page fault.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3086?
CVE-2010-3086 has been assigned a medium severity due to the risk of kernel panic that can manifest from specific memory access violations.
How do I fix CVE-2010-3086?
To address CVE-2010-3086, update the Linux kernel to the latest version beyond 2.6.24.7, ensuring all patches have been applied.
What systems are affected by CVE-2010-3086?
CVE-2010-3086 affects various Linux kernel versions up to and including 2.6.24.7.
What is the nature of the vulnerability in CVE-2010-3086?
CVE-2010-3086 is a vulnerability related to improper handling of kernel memory, which can lead to system crashes.
Is there a workaround for CVE-2010-3086?
There are no known effective workarounds for CVE-2010-3086, making patching the system the primary mitigation strategy.