CVE-2010-4169: Use After Free
Description of problem: Upstream commit dab5855 ("perfcounter: Add mmap event hooks to mprotect()") is fundamentally wrong as mprotectfixup() can free 'vma' due to merging. Fix the problem by moving perfeventmmap() hook to mprotectfixup(). In certain scenario, a local, unprivileged user could use this flaw to trigger a denial of service.
Upstream commit: http://git.kernel.org/linus/63bfd7384b119409685a17d5c58f0b56e5dc03da
Other sources
Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an mprotect system call.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4169?
CVE-2010-4169 has not been assigned a specific severity rating, but it poses a risk due to its potential exploitation by local, unprivileged users.
How do I fix CVE-2010-4169?
To fix CVE-2010-4169, you should upgrade your Linux kernel to a version greater than 2.6.37.
Which Linux distributions are affected by CVE-2010-4169?
CVE-2010-4169 affects various distributions, including Debian's linux-2.6, Fedora 13, and openSUSE 11.3.
Can CVE-2010-4169 be exploited remotely?
No, CVE-2010-4169 requires local access for exploitation, as it affects unprivileged local users.
What are the implications of CVE-2010-4169 for system security?
CVE-2010-4169 could allow an unprivileged user to affect system performance and stability through improper handling of memory protection.