CVE-2010-2954

🗓️ 03 Sep 2010 19:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 115 Views🌐 WEB

Linux kernel vulnerability in irda_bind function allows denial of service and possible unspecified impact via multiple unsuccessful socket bind calls. CVE-2010-295

Reporter	Title	Published	Views	Family All 69
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Cvelist	CVE-2010-2954	3 Sep 201019:00	–	cvelist
Debian	[SECURITY] [DSA 2110-1] New Linux 2.6.26 packages fix several issues	17 Sep 201015:45	–	debian
Tenable Nessus	Debian DSA-2110-1 : linux-2.6 - privilege escalation/denial of service/information leak	20 Sep 201000:00	–	nessus
Tenable Nessus	Fedora 13 : kernel-2.6.34.6-54.fc13 (2010-14235)	9 Sep 201000:00	–	nessus
Tenable Nessus	Fedora 14 : kernel-2.6.35.4-28.fc14 (2010-14832)	22 Sep 201000:00	–	nessus
Tenable Nessus	Fedora 12 : kernel-2.6.32.21-168.fc12 (2010-14878)	21 Sep 201000:00	–	nessus
Tenable Nessus	Fedora 13 : kernel-2.6.34.7-56.fc13 (2010-14890)	21 Sep 201000:00	–	nessus
Tenable Nessus	openSUSE Security Update : kernel (openSUSE-SU-2010:0895-2)	5 May 201100:00	–	nessus
Tenable Nessus	openSUSE Security Update : kernel (openSUSE-SU-2010:0664-1)	24 Sep 201000:00	–	nessus

NVD

Node

linux linux_kernelRange<2.6.36

linux linux_kernelMatch2.6.36-

linux linux_kernelMatch2.6.36rc1

linux linux_kernelMatch2.6.36rc2

Node

opensuse opensuseMatch11.3

suse linux_enterprise_desktopMatch11-

suse linux_enterprise_desktopMatch11sp1

suse linux_enterprise_serverMatch11-

suse linux_enterprise_serverMatch11sp1

Node

canonical ubuntu_linuxMatch6.06

canonical ubuntu_linuxMatch8.04-

canonical ubuntu_linuxMatch9.04

canonical ubuntu_linuxMatch9.10

canonical ubuntu_linuxMatch10.04-

canonical ubuntu_linuxMatch10.10

Source	Link
twitter	www.twitter.com/taviso/statuses/22635752128
ubuntu	www.ubuntu.com/usn/USN-1000-1
git	www.git.kernel.org/
lists	www.lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
lists	www.lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html
secunia	www.secunia.com/advisories/41234
vupen	www.vupen.com/english/advisories/2010/2266
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/61522
kernel	www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc3-next-20100901.bz2
lists	www.lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html

Parameter	Position	Path	Description	CWE
bind	path	/?p=linux/kernel/git/davem/net-2.6.git;a=commitdiff;h=628e300cccaa628d8fb92aa28cb7530a3d5f2257	NULL pointer dereference in irda_bind when irda_open_tsap fails, leading to potential denial of service via multiple unsuccessful AF_IRDA socket binds	CWE-476
irda_open_tsap	path	/?p=linux/kernel/git/davem/net-2.6.git;a=commitdiff;h=628e300cccaa628d8fb92aa28cb7530a3d5f2257	NULL pointer dereference in irda_bind when irda_open_tsap fails, leading to potential denial of service via multiple unsuccessful AF_IRDA socket binds	CWE-476
ias_obj	path	/?p=linux/kernel/git/davem/net-2.6.git;a=commitdiff;h=628e300cccaa628d8fb92aa28cb7530a3d5f2257	NULL pointer dereference in irda_bind when irda_open_tsap fails, leading to potential denial of service via multiple unsuccessful AF_IRDA socket binds	CWE-476

16 Jun 2026 23:21Current

7.3High risk

Vulners AI Score7.3

CVSS 24.9

EPSS0.00422

CWE-476