CVE-2010-4163: Input Validation
By submitting certain I/O requests with 0 length, a local user could cause a kernel panic.
Proposed patch: http://git.kernel.org/?p=linux/kernel/git/axboe/linux-2.6-block.git;a=commit;h=9284bcf4e335e5f18a8bc7b26461c33ab60d0689
Acknowledgements:
Red Hat would like to thank Dan Rosenberg for reporting this issue.
Other sources
The blkrqmapuseriov function in block/blk-map.c in the Linux kerne ...
— Debian
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2010-4163?
CVE-2010-4163 is considered a high severity vulnerability due to its potential to cause kernel panic and disrupt system operation.
How do I fix CVE-2010-4163?
To fix CVE-2010-4163, update to the patched kernel versions provided by Red Hat or other Linux distributions.
Which versions are affected by CVE-2010-4163?
CVE-2010-4163 affects various Linux kernel versions including those before 2.6.36.2 and specific versions in Red Hat and OpenSUSE.
Who could exploit CVE-2010-4163?
A local user with access to submit I/O requests could exploit CVE-2010-4163 to cause a kernel panic.
What are the potential impacts of CVE-2010-4163?
The potential impacts of CVE-2010-4163 include a complete system crash and loss of service, requiring a reboot to recover.