CVE-2010-4656: Buffer Overflow
If the iowarrior devices in this case statement support more than 8 bytes per report, it is possible to write past the end of a kernel heap allocation. This will probably never be possible, but change the allocation to be more defensive anyway.
Upstream commit: http://git.kernel.org/linus/3ed780117dbe5acb64280d218f0347f238dafed0
Acknowledgements:
Red Hat would like to thank Kees Cook for reporting this issue.
Other sources
The iowarriorwrite function in drivers/usb/misc/iowarrior.c in the Li ...
— Debian
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4656?
CVE-2010-4656 has a medium severity rating due to potential heap overflow risks.
How do I fix CVE-2010-4656?
To mitigate CVE-2010-4656, update to a patched version of the Linux kernel or apply relevant security patches.
Which systems are affected by CVE-2010-4656?
CVE-2010-4656 affects various Linux kernel versions prior to 2.6.37 and specific distributions like Ubuntu 8.04.
What type of vulnerability is CVE-2010-4656?
CVE-2010-4656 is a heap overflow vulnerability associated with improper handling of input from iowarrior devices.
Can CVE-2010-4656 be exploited remotely?
Exploitation of CVE-2010-4656 would likely require local access or specific conditions, making remote exploitation unlikely.