CVE-2010-4650

Published: Jun 21, 2012Modified: Apr 29, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the fuse_do_ioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server.

Affected (4)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.36.4
Linux Linux Kernel	Version 2.6.36.1
Linux Linux Kernel	Version 2.6.36.2
Linux Linux Kernel	Version 2.6.36.3

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (10)

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7572777eef78ebdee1ecb7c258c0ef94d35bad16

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/01/06/18

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=667892

Source: secalert@redhat.com

https://github.com/torvalds/linux/commit/7572777eef78ebdee1ecb7c258c0ef94d35bad16

Source: secalert@redhat.com

Patch

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37