VULNERABILITY INTELLIGENCE

CVE-2010-4163

CVSS score4.7 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2011-01-03
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:N/A:C

Description

The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references