VULNERABILITY INTELLIGENCE

CVE-2010-4529

CVSS score2.1 LOW
EPSS probability0.40%
CISA KEVNot currently listed
Published2011-01-13
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

Integer underflow in the irda_getsockopt function in net/irda/af_irda.c in the Linux kernel before 2.6.37 on platforms other than x86 allows local users to obtain potentially sensitive information from kernel heap memory via an IRLMP_ENUMDEVICES getsockopt call.

Weakness classification

  • CWE-191: Integer Underflow (Wrap or Wraparound)

Primary references