CVE-2010-4526: Race Condition
Last updated 24 July 2024
Other sources
Race condition in the sctpicmpprotounreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctpwaitforconnect function.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4526?
CVE-2010-4526 has been classified as a medium severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2010-4526?
To mitigate CVE-2010-4526, users should upgrade to a fixed version of the Linux kernel that addresses this race condition.
Which versions are affected by CVE-2010-4526?
CVE-2010-4526 affects Linux kernel versions from 2.6.11-rc2 to 2.6.33 inclusive.
What causes the vulnerability CVE-2010-4526?
CVE-2010-4526 is caused by a race condition in the sctp_icmp_proto_unreachable function of the Linux kernel.
What type of attack can exploit CVE-2010-4526?
CVE-2010-4526 can be exploited by remote attackers sending an ICMP unreachable message to a locked socket, leading to a denial of service.