CVE catalog

CVE-2010-0307

linux-2.6 - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.83% · Oct 25, 2026

The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function. kernel: DoS on x86_64 This issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed. For further information about Errata Support Policy, visit: https://access.redhat.com/support/policy/updates/errata/ The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlinux-2.65.02.6.26-13vulnerable
Debianlinux-2.65.02.6.26-13lenny2vulnerable
Debianlinux-2.65.02.6.26-13lenny2~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-14vulnerable
Debianlinux-2.65.02.6.26-15vulnerable
Debianlinux-2.65.02.6.26-15lenny1vulnerable
Debianlinux-2.65.02.6.26-15lenny2vulnerable
Debianlinux-2.65.02.6.26-15lenny3vulnerable
Debianlinux-2.65.02.6.26-15~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-15~bpo40+2vulnerable
Debianlinux-2.65.02.6.26-16vulnerable
Debianlinux-2.65.02.6.26-17vulnerable
Debianlinux-2.65.02.6.26-17lenny1vulnerable
Debianlinux-2.65.02.6.26-17lenny2vulnerable
Debianlinux-2.65.02.6.26-17lenny2~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-17~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-18vulnerable
Debianlinux-2.65.02.6.26-19vulnerable
Debianlinux-2.65.02.6.26-19lenny1vulnerable
Debianlinux-2.65.02.6.26-19lenny2vulnerable
Debianlinux-2.65.02.6.26-19~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-20vulnerable
Debianlinux-2.65.02.6.26-20~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-21vulnerable
Debianlinux-2.65.02.6.26-21lenny1vulnerable
Debianlinux-2.65.02.6.26-21lenny2vulnerable
Debianlinux-2.65.02.6.26-21~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-21lenny3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlinux-2.6deb5.02.6.26-21lenny3Not reportedDSA-1996-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References