CVE-2010-4250: Medium severity Linux Linux kernel vulnerability
If inotifyinit is unable to allocate a new file for the new inotify group we leak the new group.
Acknowledgements:
Red Hat would like to thank Vegard Nossum for reporting this issue.
Other sources
Memory leak in the inotifyinit1 function in fs/notify/inotify/inotifyuser.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory consumption) via vectors involving failed attempts to create files.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4250?
CVE-2010-4250 has been classified as a moderate severity vulnerability due to its potential for memory leak exploitation.
How do I fix CVE-2010-4250?
To fix CVE-2010-4250, upgrade to a kernel version later than 2.6.36.4 where the vulnerability is patched.
What systems are affected by CVE-2010-4250?
CVE-2010-4250 affects Linux kernel versions up to and including 2.6.36.4.
Is CVE-2010-4250 a denial-of-service risk?
CVE-2010-4250 could lead to denial-of-service conditions due to leaking resources if exploited.
What is inotify_init in CVE-2010-4250?
In CVE-2010-4250, inotify_init is a function used to initialize inotify, a Linux kernel subsystem for monitoring file system events.