CVE-2010-3080: canonical ubuntu_linux Double Free

Modified

Published 21-09-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-3080 is a high (CVSS 7.2) Double Free vulnerability in canonical ubuntu_linux. EPSS estimates a 0.42% chance of exploitation in the next 30 days, higher than 35.9% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 7.2, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

7.2/10

010

High · v2.0 (NVD)

EPSS score

0.42%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2

DSA-2110-1 RHSA-2011:0007

Timeline

21-09-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c in the Linux kernel before 2.6.36-rc4 might allow local users to cause a denial of service or possibly have unspecified other impact via an unsuccessful attempt to open the /dev/sequencer device.

CVSS metrics

1 score · 1 source · 1 version

v2.07.2

EPSS trend

Probability

0.42%

Chance of exploitation in the next 30 days

Percentile

36%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.42% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-415Double FreeThe product calls free() twice on the same memory address.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Suse3 products

linux_enterprise_desktop11:sp1
linux_enterprise_real_time_extension11:sp1
linux_enterprise_server11:sp1

Canonical1 product

ubuntu_linuxEOL6.06 | 8.04 | 9.04 | 9.10 | 10.04 | 10.10

Linux1 product

linux_kernel< 2.6.36 | 2.6.36 | 2.6.36:rc1 | 2.6.36:rc2 | 2.6.36:rc3

Opensuse1 product

opensuseEOL11.1

4 vendors · 6 products

References

14 links

www.ubuntu.com/usn/USN-1000-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
git.kernel.orgX Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDVSA-2010:198Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.redhat.com/support/errata/RHSA-2011-0007.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.vupen.com/english/advisories/2011/0298VDB EntryX Refsource VUPENThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=630551X Refsource CONFIRMIssue TrackingThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.securityfocus.com/bid/43062VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/42890Third Party AdvisoryX Refsource SECUNIA

Show all 14 references

www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4X Refsource CONFIRMBroken Link
www.openwall.com/lists/oss-security/2010/09/08/7Mailing ListX Refsource MLISTThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
git.kernel.orgX Refsource CONFIRM