CVE-2010-4242: Null Pointer Dereference
Last updated 24 July 2024
Other sources
Problem description:
hciuartttyopen() is missing check that tty has a write op (a few don't), and you should check this at open and refuse if the ops you need don't exist (eg as SLIP does:
static int slipopen(struct ttystruct tty) { struct slip sl; int err;
if (!capable(CAPNETADMIN)) return -EPERM;
if (tty->ops->write == NULL) return -EOPNOTSUPP;
Fortunately almost no system will have a driver loaded which lacks a write op, but this should be fixed.
— Red Hat
The hciuartttyopen function in the HCI UART driver (drivers/bluetoo ...
— Debian
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4242?
CVE-2010-4242 has a medium severity level due to potential invalid pointer access in the Bluetooth HCI UART.
How do I fix CVE-2010-4242?
To fix CVE-2010-4242, update to a later version of the Linux kernel where this vulnerability has been addressed.
What systems are affected by CVE-2010-4242?
CVE-2010-4242 affects the Linux Kernel version 2.6.36 and potentially other packages reliant on the affected code.
What type of vulnerability is CVE-2010-4242?
CVE-2010-4242 is classified as an invalid pointer dereference vulnerability.
Is CVE-2010-4242 a known issue in Linux 2.6.36?
Yes, CVE-2010-4242 is a documented issue within Linux 2.6.36 affecting Bluetooth HCI UART operations.