Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0415
HistoryFeb 17, 2010 - 12:00 a.m.

CVE-2010-0415

2010-02-1700:00:00
ubuntu.com
ubuntu.com
17

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

0.4%

The do_pages_move function in mm/migrate.c in the Linux kernel before
2.6.33-rc7 does not validate node values, which allows local users to read
arbitrary kernel memory locations, cause a denial of service (OOPS), and
possibly have unspecified other impact by specifying a node that is not
part of the kernel’s node set.

Notes

Author Note
kees Introduced in 2.6.18.
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchlinux< 2.6.24-27.68UNKNOWN
ubuntu8.10noarchlinux< 2.6.27-17.46UNKNOWN
ubuntu9.04noarchlinux< 2.6.28-18.60UNKNOWN
ubuntu9.10noarchlinux< 2.6.31-20.58UNKNOWN

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

0.4%