CVE-2010-0415

The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel's node set.

CVSS v2.0 NVD

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.80% chance of exploitation in the next 30 days, 78th percentile

Published

2010-02-17

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/40810

Exploit collections (1)

• CVE-2010-0415helloexp/0day

Security advisories

• http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:066
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
• http://www.redhat.com/support/errata/RHSA-2010-0147.html
• http://www.redhat.com/support/errata/RHSA-2010-0161.html
• http://www.securityfocus.com/bid/38144
• http://www.ubuntu.com/usn/USN-914-1
• http://www.vmware.com/security/advisories/VMSA-2011-0003.html

References

• CVE Record
• NVD entry