CVE-2010-3437
Published: 04 October 2010
Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and system crash) via a crafted index value in a PKT_CTRL_CMD_STATUS ioctl call.
From the Ubuntu security team
Dan Rosenberg discovered that the CD driver did not correctly check parameters. A local attacker could exploit this to read arbitrary kernel memory, leading to a loss of privacy.
Priority
Medium
Status
Notes
| Author | Note |
|---|---|
| smb | This was assigned to bradf and I re-assigned it to myself for minor fixups and so the tools will find things. |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3437
- https://usn.ubuntu.com/usn/usn-1000-1
- https://usn.ubuntu.com/usn/usn-1074-1
- https://usn.ubuntu.com/usn/usn-1074-2
- https://usn.ubuntu.com/usn/usn-1083-1
- https://usn.ubuntu.com/usn/usn-1093-1
- https://usn.ubuntu.com/usn/usn-1119-1
- NVD
- Launchpad
- Debian