01 Record

CVE-2010-3081

The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit

UnratedPUBLISHEDCNA: redhat

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 3.53% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 88.7% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2010-09-24 19:00Z16 YR AGO

Last updated

2024-08-07 02:55Z2 YR AGO

Reserved

2010-08-20

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass
CWE-191Integer Underflow (Wrap or Wraparound)Base

Data version

5.1

Document digest

71c0b5ba9fd8402828ce8cea5eb9e64d968ce84d7c40abc17fc8966285c7e508

05 Affected products

VendorProductVersionsPlatforms

linuxlinux_kernelNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_mrgNot specified—

redhatrhel_elsNot specified—

redhatrhel_eusNot specified—

susesuse_linux_enterprise_desktopNot specified—

susesuse_linux_enterprise_serverNot specified—

vmwareesxNot specified—

06 References

www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2010-0017.htmlx_refsource_CONFIRM
isc.sans.eduhttp://isc.sans.edu/diary.html?storyid=9574x_refsource_MISC
www.vupen.comADV-2010-3083http://www.vupen.com/english/advisories/2010/3083vdb-entryx_refsource_VUPEN
www.vupen.comADV-2010-3117http://www.vupen.com/english/advisories/2010/3117vdb-entryx_refsource_VUPEN
sota.gen.nzhttp://sota.gen.nz/compat1/x_refsource_MISC
www.mandriva.comMDVSA-2010:198http://www.mandriva.com/security/advisories?name=MDVSA-2010:198vendor-advisoryx_refsource_MANDRIVA
access.redhat.comhttps://access.redhat.com/kb/docs/DOC-40265x_refsource_CONFIRM
www.securityfocus.com20101130 VMSA-2010-0017 VMware ESX third party update for Service Console kernehttp://www.securityfocus.com/archive/1/514938/30/30/threadedmailing-listx_refsource_BUGTRAQ
secunia.com42384http://secunia.com/advisories/42384third-party-advisoryx_refsource_SECUNIA
archives.neohapsis.com20100916 Workaround for Ac1db1tch3z exploit.http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0278.htmlmailing-listx_refsource_FULLDISC
lists.opensuse.orgSUSE-SA:2011:007http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlvendor-advisoryx_refsource_SUSE
www.redhat.comRHSA-2010:0842http://www.redhat.com/support/errata/RHSA-2010-0842.htmlvendor-advisoryx_refsource_REDHAT
www.mandriva.comMDVSA-2010:247http://www.mandriva.com/security/advisories?name=MDVSA-2010:247vendor-advisoryx_refsource_MANDRIVA
www.vupen.comADV-2011-0298http://www.vupen.com/english/advisories/2011/0298vdb-entryx_refsource_VUPEN
www.redhat.comRHSA-2010:0882http://www.redhat.com/support/errata/RHSA-2010-0882.htmlvendor-advisoryx_refsource_REDHAT
www.kernel.orghttp://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.36-rc4-git2.logx_refsource_CONFIRM
lists.opensuse.orgSUSE-SA:2010:050http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.htmlvendor-advisoryx_refsource_SUSE
blog.ksplice.comhttp://blog.ksplice.com/2010/09/cve-2010-3081/x_refsource_MISC
secunia.com43315http://secunia.com/advisories/43315third-party-advisoryx_refsource_SECUNIA
lists.opensuse.orgSUSE-SR:2010:017http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.htmlvendor-advisoryx_refsource_SUSE
www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2011-0003.htmlx_refsource_CONFIRM
archives.neohapsis.com20100916 Ac1db1tch3z vs x86_64 Linux Kernelhttp://archives.neohapsis.com/archives/fulldisclosure/2010-09/0273.htmlmailing-listx_refsource_FULLDISC
git.kernel.orghttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c41d68a513c71e35a14f66d71782d27a79a81ea6x_refsource_CONFIRM
www.redhat.comRHSA-2010:0758http://www.redhat.com/support/errata/RHSA-2010-0758.htmlvendor-advisoryx_refsource_REDHAT
www.securityfocus.com20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESXhttp://www.securityfocus.com/archive/1/516397/100/0/threadedmailing-listx_refsource_BUGTRAQ
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=634457x_refsource_CONFIRM
www.mandriva.comMDVSA-2010:214http://www.mandriva.com/security/advisories?name=MDVSA-2010:214vendor-advisoryx_refsource_MANDRIVA
marc.info[oss-security] 20100916 CVE-2010-3081 kernel: 64-bit Compatibility Mode Stack Pointer Underflowhttp://marc.info/?l=oss-security&m=128461522230211&w=2mailing-listx_refsource_MLIST