CVE-2010-4526

Summary

CVE	CVE-2010-4526
State	PUBLISHED
Assigner	redhat
Source Priority	CVE Program / NVD first with legacy fallback
Published	2011-01-11 03:00:04 UTC
Updated	2026-04-29 01:13:23 UTC
Description	Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctp_wait_for_connect function.

Risk And Classification

Primary CVSS: v2.0 7.1 from [email protected]

AV:N/AC:M/Au:N/C:N/I:N/A:C

Problem Types: CWE-362 | n/a

CVSS v2.0 Breakdown

Access Vector

Network

Access Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

AV:N/AC:M/Au:N/C:N/I:N/A:C

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	2.6.11	rc2	All	All
Operating System	Linux	Linux Kernel	2.6.11	rc3	All	All
Operating System	Linux	Linux Kernel	2.6.11	rc4	All	All
Operating System	Linux	Linux Kernel	2.6.11	rc5	All	All
Operating System	Linux	Linux Kernel	All	All	All	All
Operating System	Redhat	Enterprise Mrg	1.0	All	All	All
Operating System	Vmware	Esx	4.0	All	All	All
Operating System	Vmware	Esx	4.1	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

References

Reference	Source	Link	Tags
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	www.redhat.com	Broken Link
Linux Kernel SCTP Local Race Condition Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Third Party Advisory, VDB Entry
Red Hat update for kernel - Secunia.com	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Broken Link
SecurityFocus	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Third Party Advisory, VDB Entry
oss-security - CVE-2010-4526 kernel: sctp: a race between ICMP protocol unreachable and connect()	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com	Mailing List, Patch, Third Party Advisory
About Secunia Research \| Flexera	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Broken Link
IBM X-Force Exchange	af854a3a-2127-422b-91ae-364da2661108	exchange.xforce.ibmcloud.com	Third Party Advisory, VDB Entry
VMSA-2011-0012.2	af854a3a-2127-422b-91ae-364da2661108	www.vmware.com	Third Party Advisory
664914 – (CVE-2010-4526) CVE-2010-4526 kernel: sctp: a race between ICMP protocol unreachable and connect()	af854a3a-2127-422b-91ae-364da2661108	bugzilla.redhat.com	Issue Tracking, Patch, Third Party Advisory
oss-security - Re: CVE-2010-4526 kernel: sctp: a race between ICMP protocol unreachable and connect()	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com	Mailing List, Patch, Third Party Advisory
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH	af854a3a-2127-422b-91ae-364da2661108	www.vupen.com	Broken Link
kernel/git/torvalds/linux.git - Linux kernel source tree	af854a3a-2127-422b-91ae-364da2661108	git.kernel.org
kernel/git/torvalds/linux.git - Linux kernel source tree	MITRE	git.kernel.org
Red Hat Customer Portal	MITRE	access.redhat.com
Red Hat Customer Portal	MITRE	access.redhat.com
Red Hat Customer Portal	MITRE	access.redhat.com
access.redhat.com \| CVE-2010-4526	MITRE	access.redhat.com
664914 – (CVE-2010-4526) CVE-2010-4526 kernel: sctp: a race between ICMP protocol unreachable and connect()	MITRE	bugzilla.redhat.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.