VULNERABILITY INTELLIGENCE

CVE-2010-4346

CVSS score2.1 LOW
EPSS probability0.40%
CISA KEVNot currently listed
Published2010-12-22
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:N

Description

The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application.

Weakness classification

  • CWE-476: NULL Pointer Dereference

Primary references