CVE-2010-1148

Published: Apr 12, 2010Modified: Apr 29, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

The cifs_create function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a NULL nameidata (aka nd) field in a POSIX file-creation request to a server that supports UNIX extensions.

Affected (1)

Products: Linux: Linux Kernel

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.33.2

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (24)

http://lists.samba.org/archive/linux-cifs-client/2010-April/005741.html

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://lists.samba.org/archive/linux-cifs-client/2010-April/005742.html

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://lists.samba.org/archive/linux-cifs-client/2010-April/005746.html

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://lists.samba.org/archive/linux-cifs-client/2010-April/005757.html

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://marc.info/?l=oss-security&m=127045754521927&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=oss-security&m=127045779122119&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2010/04/06/2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/39344

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/39186

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://xorl.wordpress.com/2010/04/05/linux-kernel-unix-extensions-cifs-null-pointer-dereference/

Source: secalert@redhat.com

ExploitThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=579445

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/57561

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://lists.samba.org/archive/linux-cifs-client/2010-April/005741.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://lists.samba.org/archive/linux-cifs-client/2010-April/005742.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://lists.samba.org/archive/linux-cifs-client/2010-April/005746.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://lists.samba.org/archive/linux-cifs-client/2010-April/005757.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://marc.info/?l=oss-security&m=127045754521927&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://marc.info/?l=oss-security&m=127045779122119&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2010/04/06/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://secunia.com/advisories/39344

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/39186

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://xorl.wordpress.com/2010/04/05/linux-kernel-unix-extensions-cifs-null-pointer-dereference/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=579445

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/57561

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.