CVE-2010-3880: debian debian_linux Loop with Unreachable Exit Condition

Vulnerability summary

CVE-2010-3880 is a medium (CVSS 4.9) Loop with Unreachable Exit Condition vulnerability in debian debian_linux. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 37.8% of scored vulnerabilities.

Timeline

1. 10-12-2010
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

net/ipv4/inet_diag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message that contains multiple attribute elements, as demonstrated by INET_DIAG_BC_JMP instructions.

• CWE-835Loop with Unreachable Exit ConditionThe product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.