{"schemaVersion":3,"id":"CVE-2010-4157","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large argument in an ioctl call.","dates":{"published":"2010-12-10T18:00:00.000Z","modified":"2024-08-07T03:34:37.354Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.2,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.2,"severity":"medium","vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0054,"percentile":0.44243,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.0054},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0054,"percentile":0.44243}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0054,"percentile":0.44243}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_7B8BD366B06B8A43","name":"Exploit Reference (openwall.com)","source":"reference","url":"http://openwall.com/lists/oss-security/2010/11/09/4","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"13","noFixRecorded":false,"fixedIn":null}],"versionsText":"13","eol":{"isEol":true,"eolDate":"2011-06-24T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"13","label":"13 (Goddard)","eolFrom":"2011-06-24T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"linux","product":"linux_kernel","name":"linux kernel","label":"linux_kernel","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 2.6.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.36.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"linux","label":"Linux Kernel","category":"os"}},"hubHref":"/vendor/linux/linux_kernel"},{"vendor":"opensuse","product":"opensuse","name":"opensuse","label":"opensuse","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11.2","noFixRecorded":false,"fixedIn":null},{"text":"11.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.2 | 11.3","eol":{"isEol":true,"eolDate":"2011-05-12T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11.2","label":"11.2","eolFrom":"2011-05-12T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/opensuse"},{"vendor":"suse","product":"linux_enterprise_desktop","name":"linux enterprise desktop","label":"linux_enterprise_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10:sp3","noFixRecorded":false,"fixedIn":null},{"text":"11:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"10:sp3 | 11:sp1","eol":null,"hubHref":"/vendor/suse/linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_real_time_extension","name":"linux enterprise real time extension","label":"linux_enterprise_real_time_extension","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp1","eol":null,"hubHref":"/vendor/suse/linux_enterprise_real_time_extension"},{"vendor":"suse","product":"linux_enterprise_server","name":"linux enterprise server","label":"linux_enterprise_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"9","noFixRecorded":false,"fixedIn":null},{"text":"10:sp3","noFixRecorded":false,"fixedIn":null},{"text":"11:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"9 | 10:sp3 | 11:sp1","eol":null,"hubHref":"/vendor/suse/linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit","name":"linux enterprise software development kit","label":"linux_enterprise_software_development_kit","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"10:sp3","eol":null,"hubHref":"/vendor/suse/linux_enterprise_software_development_kit"}],"affectedCount":7,"eol":{"hasEol":true,"count":2},"references":[{"url":"http://ns3.spinics.net/lists/linux-scsi/msg47361.html","label":"ns3.spinics.net/lists/linux-scsi/msg47361.html","hostname":"ns3.spinics.net","tags":["Mailing List","X Refsource MLIST","Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=651147","label":"bugzilla.redhat.com/show_bug.cgi?id=651147","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42789","label":"secunia.com/advisories/42789","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2011/0024","label":"www.vupen.com/english/advisories/2011/0024","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html","label":"lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42778","label":"secunia.com/advisories/42778","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0004.html","label":"www.redhat.com/support/errata/RHSA-2011-0004.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2010/11/09/3","label":"openwall.com/lists/oss-security/2010/11/09/3","hostname":"openwall.com","tags":["Mailing List","X Refsource MLIST","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42801","label":"secunia.com/advisories/42801","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/520102/100/0/threaded","label":"www.securityfocus.com/archive/1/520102/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/46397","label":"secunia.com/advisories/46397","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html","label":"lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f63ae56e4e97fb12053590e41a4fa59e7daa74a4","label":"git.kernel.org","hostname":"git.kernel.org","tags":["X Refsource CONFIRM"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html","label":"lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html","label":"lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42932","label":"secunia.com/advisories/42932","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://openwall.com/lists/oss-security/2010/11/09/1","label":"openwall.com/lists/oss-security/2010/11/09/1","hostname":"openwall.com","tags":["Mailing List","X Refsource MLIST","Patch","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2010/11/09/4","label":"openwall.com/lists/oss-security/2010/11/09/4","hostname":"openwall.com","tags":["Mailing List","X Refsource MLIST","Exploit","Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0124","label":"www.vupen.com/english/advisories/2011/0124","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2010/11/09/5","label":"openwall.com/lists/oss-security/2010/11/09/5","hostname":"openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html","label":"lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html","label":"lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3321","label":"www.vupen.com/english/advisories/2010/3321","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0298","label":"www.vupen.com/english/advisories/2011/0298","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0958.html","label":"www.redhat.com/support/errata/RHSA-2010-0958.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42963","label":"secunia.com/advisories/42963","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0012.html","label":"www.vmware.com/security/advisories/VMSA-2011-0012.html","hostname":"www.vmware.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2010/11/10/12","label":"openwall.com/lists/oss-security/2010/11/10/12","hostname":"openwall.com","tags":["Mailing List","X Refsource MLIST","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/44648","label":"www.securityfocus.com/bid/44648","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0375","label":"www.vupen.com/english/advisories/2011/0375","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0162.html","label":"www.redhat.com/support/errata/RHSA-2011-0162.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0012","label":"www.vupen.com/english/advisories/2011/0012","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html","label":"lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.1","label":"www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.1","hostname":"www.kernel.org","tags":["X Refsource CONFIRM","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0168","label":"www.vupen.com/english/advisories/2011/0168","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42745","label":"secunia.com/advisories/42745","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/43291","label":"secunia.com/advisories/43291","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]}],"lineage":{"upstream":[],"downstream":["DSA-2126-1","RHSA-2010:0958","RHSA-2011:0004","RHSA-2011:0162"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2010-12-10T18:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T03:34:37.354Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:02:59.673Z","stale":false,"partial":false}}