CVE-2010-3698: fedoraproject fedora Uncontrolled Resource Consumption
Vulnerability summary
CVE-2010-3698 is a medium (CVSS 4.9) Uncontrolled Resource Consumption vulnerability in fedoraproject fedora. EPSS estimates a 0.42% chance of exploitation in the next 30 days, higher than 36.4% of scored vulnerabilities.
Not severe (CVSS 4.9, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1Timeline
- 26-11-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, which allows host OS users to cause a denial of service (host OS crash) via a KVM_RUN ioctl call in conjunction with a modified Local Descriptor Table (LDT).
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.42%
Chance of exploitation in the next 30 days
Percentile
36%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.42% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat5 products
- kmod-kvm< 0:83-164.el5_5.25
- kvm< 0:83-164.el5_5.25
- kvm-debuginfo< 0:83-164.el5_5.25
- kvm-qemu-img< 0:83-164.el5_5.25
- kvm-tools< 0:83-164.el5_5.25
Fedoraproject1 product
- fedoraEOL13
Linux1 product
- linux_kernel< 2.6.36
3 vendors · 7 products
References
17 links- www.redhat.com/support/errata/RHSA-2010-0898.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- git.kernel.orgX Refsource CONFIRM
- www.redhat.com/support/errata/RHSA-2010-0842.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- www.mandriva.com/security/advisories?name=MDVSA-2011:029Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
Show all 17 references
- bugzilla.redhat.com/show_bug.cgi?id=639879X Refsource CONFIRMIssue TrackingThird Party AdvisoryREPORT
