VULNERABILITY INTELLIGENCE

CVE-2010-3437

CVSS score6.6 MEDIUM
EPSS probability2.40%
CISA KEVNot currently listed
Published2010-10-04
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:N/A:C

Description

Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and system crash) via a crafted index value in a PKT_CTRL_CMD_STATUS ioctl call.

Weakness classification

  • CWE-476: NULL Pointer Dereference

Primary references