CVE-2010-3849: Null Pointer Dereference
Last updated 24 July 2024
Other sources
The econetsendmsg function in net/econet/afeconet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3849?
CVE-2010-3849 has been categorized as a denial of service vulnerability due to a NULL pointer dereference.
How do I fix CVE-2010-3849?
To mitigate CVE-2010-3849, update the Linux kernel to version 2.6.36.2 or later.
Which versions of Linux are affected by CVE-2010-3849?
CVE-2010-3849 affects Linux kernel versions prior to 2.6.36.2 as well as several specific distributions like Debian 5.0 and various SUSE and Ubuntu releases.
What is the impact of CVE-2010-3849?
The impact of CVE-2010-3849 is a denial of service condition that can cause the system to crash or become unresponsive.
Can local users exploit CVE-2010-3849?
Yes, local users can exploit CVE-2010-3849 by invoking a sendmsg call that specifies a NULL value for the remote address.