CVE-2010-4668
Summary
| CVE | CVE-2010-4668 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-01-03 20:00:43 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4163. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
CompleteAV:L/AC:M/Au:N/C:N/I:N/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.37 | - | All | All |
| Operating System | Linux | Linux Kernel | 2.6.37 | rc1 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.37 | rc2 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.37 | rc3 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.37 | rc4 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.37 | rc5 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.37 | rc6 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 404: File not found | af854a3a-2127-422b-91ae-364da2661108 | www.kernel.org | Broken Link |
| access.redhat.com | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | Third Party Advisory |
| Red Hat update for kernel - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Third Party Advisory, Vendor Advisory |
| oss-security - Re: CVE request: kernel: Multiple DoS issues in block layer | af854a3a-2127-422b-91ae-364da2661108 | openwall.com | Mailing List, Patch, Third Party Advisory |
| oss-security - Re: CVE request: kernel: Multiple DoS issues in block layer | af854a3a-2127-422b-91ae-364da2661108 | openwall.com | Mailing List, Patch, Third Party Advisory |
| oss-security - Re: CVE request: kernel: Multiple DoS issues in block layer | af854a3a-2127-422b-91ae-364da2661108 | openwall.com | Mailing List, Patch, Third Party Advisory |
| 404: File not found - Patchwork | af854a3a-2127-422b-91ae-364da2661108 | patchwork.kernel.org | Patch, Third Party Advisory |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | Third Party Advisory, VDB Entry |
| Linux Kernel 'blk_rq_map_user_iov()' Local Denial of Service Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| LKML: Jens Axboe: Re: [PATCH] block: check for proper length of iov entries earlier in blk_rq_map_user_iov() | af854a3a-2127-422b-91ae-364da2661108 | lkml.org | Mailing List, Third Party Advisory |
| kernel/git/torvalds/linux.git - Linux kernel source tree | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | |
| LKML: Xiaotian Feng: [PATCH] block: check for proper length of iov entries earlier in blk_rq_map_user_iov() | af854a3a-2127-422b-91ae-364da2661108 | lkml.org | Mailing List, Patch, Third Party Advisory |
| kernel/git/torvalds/linux.git - Linux kernel source tree | MITRE | git.kernel.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.