CVE-2010-3880: Medium severity linux kernel vulnerability
Description of problem: INET-DIAG is inconsistent about how it looks up the bytecode contained in a netlink message, making it possible for a user to cause the kernel to execute unaudited INET-DIAG bytecode. This can be abused to make the kernel enter an infinite loop, and possibly other consequences.
Reference: http://www.spinics.net/lists/netdev/msg145899.html
Acknowledgements:
Red Hat would like to thank Nelson Elhage for reporting this issue.
Other sources
net/ipv4/inetdiag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INETDIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INETDIAGREQBYTECODE instructions in a netlink message that contains multiple attribute elements, as demonstrated by INETDIAGBCJMP instructions.
— Debian
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3880?
CVE-2010-3880 is classified as a medium severity vulnerability due to its potential to cause an infinite loop in the kernel.
How does CVE-2010-3880 affect the Linux kernel?
CVE-2010-3880 allows users to execute unaudited INET-DIAG bytecode, potentially leading to a denial of service.
Which versions of the Linux kernel are affected by CVE-2010-3880?
CVE-2010-3880 affects Linux kernel versions up to and including 2.6.37.
How can I mitigate CVE-2010-3880?
To mitigate CVE-2010-3880, upgrading the Linux kernel to a version higher than 2.6.37 is recommended.
Is CVE-2010-3880 present in Debian Linux 5.0?
Yes, CVE-2010-3880 is present in Debian Linux 5.0, as it includes the affected version of the Linux kernel.