VULNERABILITY INTELLIGENCE

CVE-2010-4243

CVSS score4.9 MEDIUM
EPSS probability0.91%
CISA KEVNot currently listed
Published2011-01-22
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C

Description

fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an "OOM dodging issue," a related issue to CVE-2010-3858.

Weakness classification

  • CWE-400: Uncontrolled Resource Consumption

Primary references