CVE-2010-4565: linux linux_kernel
Vulnerability summary
CVE-2010-4565 is a low (CVSS 2.1) vulnerability in linux linux_kernel. EPSS estimates a 0.49% chance of exploitation in the next 30 days, higher than 42.2% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 2.1, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 3Timeline
- 29-12-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensitive information about kernel memory use by listing this filename.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.49%
Chance of exploitation in the next 30 days
Percentile
42%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.49% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (spinics.net)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Linux1 product
- linux_kernel≤ 2.6.36
1 vendor · 1 product
References
11 links- www.mandriva.com/security/advisories?name=MDVSA-2011:029Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory