vulnerability CVE-2010-0410 Linux kernel: denial of service via connector
Synthesis of the vulnerability

A local attacker can force the connector driver to use all system memory, which halts the system.

Severity: 1/4. Consequences: denial of service of computer. Provenance: user shell. Means of attack: no proof of concept, no attack. Ability of attacker: expert (4/4). Confidence: confirmed by the editor (5/5). Diffusion of the vulnerable configuration: high (3/3). Creation date: 03/02/2010.

Impacted products

• Debian Linux versions
• Fedora versions
• Linux kernel versions
• OpenSUSE versions
• SUSE Linux Enterprise Server versions

Description of the vulnerability

Sockets of type NETLINK are used to exchange messages between the user and the kernel. The connector driver is based on the NETLINK_CONNECTOR family, and implements a queue and a notification system. However, a local attacker can send several NETLINK_CONNECTOR messages, in order to progressively use all kernel memory. A local attacker can thus generate a denial of service.

Characteristics

Title: Linux kernel: denial of service via connector Identifiers: BID-38058, CVE-2010-0410, DSA-1996-1, DSA 2003-1, DSA 2004-1, FEDORA-2010-1787, FEDORA-2010-1804, SUSE-SA:2010:014, SUSE-SA:2010:016, VIGILANCE-VUL-9405. Url: https://vigilance.fr/tree/1/9405

Information sources

Publications and announces

Solutions for this vulnerability

Patch or workaround