Main
Vulnerability Database
Exploits
ID:10148 - Exploit for Input validation error in Linux kernel - CVE-2010-0415
ID:10148 - Exploit for Input validation error in Linux kernel - CVE-2010-0415
Published: July 3, 2024
Vulnerability identifier: #VU93717
Vulnerability risk: Low
CVE-ID: CVE-2010-0415
CWE-ID: CWE-20
Exploitation vector: Local access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to read and manipulate data.
The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel's node set.
Remediation
Install update from vendor's website.