Denial of Service (DoS) Affecting torvalds/linux package, versions [,2.6.36.1)


Severity

Recommended
0.0
low
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.08% (24th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UNMANAGED-TORVALDSLINUX-3006218
  • published26 Jan 2022
  • disclosed29 Sept 2010
  • creditUnknown

Introduced: 29 Sep 2010

CVE-2010-3310  (opens in a new tab)
CWE-189  (opens in a new tab)

How to fix?

Upgrade torvalds/linux to version 2.6.36.1 or higher.

Overview

Affected versions of this package are vulnerable to Denial of Service (DoS). Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a rose_getname function call, related to the rose_bind and rose_connect functions.

References

CVSS Base Scores

version 3.1