CVE-2010-0415: linux linux_kernel

Modified

Published 17-02-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-0415 is a medium (CVSS 4.6) vulnerability in linux linux_kernel. EPSS estimates a 1.80% chance of exploitation in the next 30 days, higher than 78.5% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 4.6, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.6/10

010

Medium · v2.0 (NVD)

EPSS score

1.80%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 5

DSA-1996-1 DSA-2003-1 DSA-2005-1 RHSA-2010:0147 RHSA-2010:0161

Timeline

17-02-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel's node set.

CVSS metrics

1 score · 1 source · 1 version

v2.04.6

EPSS trend

Probability

1.80%

Chance of exploitation in the next 30 days

Percentile

79%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.80% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databaselocallinuxUnverified
Linux Kernel 2.6.18 - 'move_pages()' Information Leak
Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Linux1 product

linux_kernel≤ 2.6.33 | 2.6.0 | 2.6.1 | 2.6.2 | 2.6.3 | 2.6.4 | 2.6.5 | 2.6.6 | 2.6.7 | 2.6.8 | 2.6.8.1 | 2.6.9 | 2.6.10 | 2.6.11 | 2.6.11.1 | 2.6.11.2 | 2.6.11.3 | 2.6.11.4 | 2.6.11.5 | 2.6.11.6 | 2.6.11.7 | 2.6.11.8 | 2.6.11.9 | 2.6.11.10 | 2.6.11.11 | 2.6.11.12 | 2.6.12 | 2.6.12.1 | 2.6.12.2 | 2.6.12.3 | 2.6.12.4 | 2.6.12.5 | 2.6.12.6 | 2.6.13 | 2.6.13.1 | 2.6.13.2 | 2.6.13.3 | 2.6.13.4 | 2.6.13.5 | 2.6.14 | 2.6.14.1 | 2.6.14.3 | 2.6.14.4 | 2.6.14.5 | 2.6.14.6 | 2.6.14.7 | 2.6.15 | 2.6.15.1 | 2.6.15.2 | 2.6.15.3 | 2.6.15.4 | 2.6.15.5 | 2.6.15.6 | 2.6.15.7 | 2.6.16 | 2.6.16.1 | 2.6.16.2 | 2.6.16.3 | 2.6.16.4 | 2.6.16.5 | 2.6.16.6 | 2.6.16.7 | 2.6.16.8 | 2.6.16.9 | 2.6.16.10 | 2.6.16.11 | 2.6.16.12 | 2.6.16.13 | 2.6.16.14 | 2.6.16.15 | 2.6.16.16 | 2.6.16.17 | 2.6.16.18 | 2.6.16.19 | 2.6.16.20 | 2.6.16.21 | 2.6.16.22 | 2.6.16.23 | 2.6.16.24 | 2.6.16.25 | 2.6.16.26 | 2.6.16.27 | 2.6.16.28 | 2.6.16.29 | 2.6.16.30 | 2.6.16.31 | 2.6.17 | 2.6.17.1 | 2.6.17.2 | 2.6.17.3 | 2.6.17.4 | 2.6.17.5 | 2.6.17.6 | 2.6.17.7 | 2.6.17.8 | 2.6.17.9 | 2.6.17.10 | 2.6.17.11 | 2.6.17.12 | 2.6.17.13 | 2.6.17.14 | 2.6.18.1 | 2.6.18.2 | 2.6.18.3 | 2.6.18.4 | 2.6.18.5 | 2.6.18.6 | 2.6.18.7 | 2.6.18.8 | 2.6.22 | 2.6.22.2 | 2.6.22.3 | 2.6.22.4 | 2.6.22.5 | 2.6.22.6 | 2.6.22.7 | 2.6.23 | 2.6.23:rc1 | 2.6.23:rc2 | 2.6.23.1 | 2.6.23.2 | 2.6.23.3 | 2.6.23.4 | 2.6.23.5 | 2.6.23.6 | 2.6.23.7 | 2.6.24:rc1 | 2.6.24:rc2 | 2.6.24:rc3 | 2.6.24:rc4 | 2.6.24:rc5 | 2.6.32 | 2.6.32.1 | 2.6.32.2 | 2.6.32.3 | 2.6.32.4 | 2.6.33:rc1 | 2.6.33:rc2 | 2.6.33:rc4 | 2.6.33:rc5

1 vendor · 1 product

References

28 links

www.openwall.com/lists/oss-security/2010/02/07/2Mailing ListX Refsource MLIST
git.kernel.orgX Refsource CONFIRM
www.ubuntu.com/usn/USN-914-1Vendor AdvisoryX Refsource UBUNTU
www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7X Refsource CONFIRMPatch
www.vupen.com/english/advisories/2010/0638VDB EntryX Refsource VUPEN
secunia.com/advisories/38557Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2010-0147.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9399VDB EntrySignatureX Refsource OVAL
lists.fedoraproject.org/pipermail/package-announce/2010-February/035070.htmlVendor AdvisoryX Refsource FEDORA
www.mandriva.com/security/advisories?name=MDVSA-2010:198Vendor AdvisoryX Refsource MANDRIVA

Show all 28 references

www.securityfocus.com/bid/38144VDB EntryX Refsource BID
secunia.com/advisories/38779Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.htmlVendor AdvisoryX Refsource SUSE
www.openwall.com/lists/oss-security/2010/02/07/1Mailing ListX Refsource MLIST
secunia.com/advisories/38922Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.htmlVendor AdvisoryX Refsource SUSE
www.debian.org/security/2010/dsa-1996Vendor AdvisoryX Refsource DEBIAN
lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/43315Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2010:066Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/39033Third Party AdvisoryX Refsource SECUNIA
www.vmware.com/security/advisories/VMSA-2011-0003.htmlX Refsource CONFIRM
www.openwall.com/lists/oss-security/2010/02/08/2Mailing ListX Refsource MLIST
www.debian.org/security/2010/dsa-2005Vendor AdvisoryX Refsource DEBIAN
www.securityfocus.com/archive/1/516397/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/38492Third Party AdvisoryX Refsource SECUNIA
bugzilla.redhat.com/show_bug.cgi?id=562582X Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2010-0161.htmlVendor AdvisoryX Refsource REDHAT