CVE-2010-0741: linux linux_kernel Improper Input Validation

Vulnerability summary

CVE-2010-0741 is a high (CVSS 7.8) Improper Input Validation vulnerability in linux linux_kernel. EPSS estimates a 3.52% chance of exploitation in the next 30 days, higher than 89% of scored vulnerabilities.

Timeline

1. 12-04-2010
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.