CVE-2010-3437

Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain…

published October 4, 2010

CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and system crash) via a crafted index value in a PKT_CTRL_CMD_STATUS ioctl call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02396 · 83.9th percentile
Published
2010-10-04T20:00Z
EPSS history
Timeline
  • 04 OCT 20:00Z
    Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain…
    cvelistv5