NULL pointer dereference in Linux Kernel

CVE-2010-1187

The Transparent Inter-Process Communication (TIPC) functionality in Linux kernel 2.6.16-rc1 through 2.6.33, and possibly other versions, allows local users to cause a denial of service (kernel OOPS) by sending datagrams through AF_TIPC before entering network mode, which triggers a NULL pointer dereference.

EPSS: 0.004 (34.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_CONFIRM)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
  • cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_MANDRIVA)
  • cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
  • cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory, VDB Entry)
  • cve@mitre.org (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
  • cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)