Description
Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows local users to cause a denial of service or possibly have unspecified other impact via crafted use of the io_submit system call.
Published: 2010-09-21
Score: 4.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-2126-1 New Linux 2.6.26 packages fix several issues
EUVD EUVD EUVD-2010-3069 Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows local users to cause a denial of service or possibly have unspecified other impact via crafted use of the io_submit system call.
Ubuntu USN Ubuntu USN USN-1000-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1074-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1074-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1083-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1093-1 Linux Kernel vulnerabilities (Marvell Dove)
References
Link Providers
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=75e1c70fc31490ef8a373ea2a4bea2524099b478 cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html cve-icon cve-icon
http://secunia.com/advisories/42778 cve-icon cve-icon
http://secunia.com/advisories/42801 cve-icon cve-icon
http://secunia.com/advisories/42890 cve-icon cve-icon
http://secunia.com/advisories/43291 cve-icon cve-icon
http://secunia.com/advisories/46397 cve-icon cve-icon
http://www.debian.org/security/2010/dsa-2126 cve-icon cve-icon
http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc4-next-20100915.bz2 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2010:257 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2010-0758.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2010-0779.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2010-0839.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2011-0007.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/520102/100/0/threaded cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1000-1 cve-icon cve-icon
http://www.vmware.com/security/advisories/VMSA-2011-0012.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2011/0012 cve-icon cve-icon
http://www.vupen.com/english/advisories/2011/0298 cve-icon cve-icon
http://www.vupen.com/english/advisories/2011/0375 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=629441 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/61884 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2010-3067 cve-icon
https://www.cve.org/CVERecord?id=CVE-2010-3067 cve-icon
History

No history.

Subscriptions

Canonical Ubuntu Linux
Debian Debian Linux
Linux Linux Kernel
Opensuse Opensuse
Redhat Enterprise Linux Enterprise Mrg
Suse Linux Enterprise Desktop Linux Enterprise Real Time Extension Linux Enterprise Server Linux Enterprise Software Development Kit
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-07T02:55:46.611Z

Reserved: 2010-08-20T00:00:00.000Z

Link: CVE-2010-3067

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2010-09-21T18:00:05.707

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-3067

cve-icon Redhat

Severity : Low

Publid Date: 2010-09-15T00:00:00Z

Links: CVE-2010-3067 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses