Privilege escalation in Linux kernel - CVE-2010-3081
Published: January 4, 2017
Vulnerability identifier: #VU3476
CSH Severity: Medium
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2010-3081
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a local user to escalate privileges.
The vulnerability exists due to improper allocation of userspace memory required for the 32-bit compatibility layer within compat_alloc_user_space() function in include/asm/compat.h file on on 64-bit platforms. A local user can call compat_mc_getsockopt() function and gain control over vulnerable system.
Successful exploitation of the vulnerability allows a local non-privileged user to gain root privileges.
Affected software
Linux kernel
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Desktop
How to mitigate CVE-2010-3081
Update to kernel version 2.6.36-rc4-git2 or newer.