CVE catalog

CVE-2010-2954

linux-2.6 - several issues

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.42% · Oct 25, 2026

The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap function, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via multiple unsuccessful calls to bind on an AF_IRDA (aka PF_IRDA) socket.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlinux-2.65.02.6.26-13vulnerable
Debianlinux-2.65.02.6.26-13lenny2vulnerable
Debianlinux-2.65.02.6.26-13lenny2~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-14vulnerable
Debianlinux-2.65.02.6.26-15vulnerable
Debianlinux-2.65.02.6.26-15lenny1vulnerable
Debianlinux-2.65.02.6.26-15lenny2vulnerable
Debianlinux-2.65.02.6.26-15lenny3vulnerable
Debianlinux-2.65.02.6.26-15~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-15~bpo40+2vulnerable
Debianlinux-2.65.02.6.26-16vulnerable
Debianlinux-2.65.02.6.26-17vulnerable
Debianlinux-2.65.02.6.26-17lenny1vulnerable
Debianlinux-2.65.02.6.26-17lenny2vulnerable
Debianlinux-2.65.02.6.26-17lenny2~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-17~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-18vulnerable
Debianlinux-2.65.02.6.26-19vulnerable
Debianlinux-2.65.02.6.26-19lenny1vulnerable
Debianlinux-2.65.02.6.26-19lenny2vulnerable
Debianlinux-2.65.02.6.26-19~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-20vulnerable
Debianlinux-2.65.02.6.26-20~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-21vulnerable
Debianlinux-2.65.02.6.26-21lenny1vulnerable
Debianlinux-2.65.02.6.26-21lenny2vulnerable
Debianlinux-2.65.02.6.26-21lenny3vulnerable
Debianlinux-2.65.02.6.26-21lenny4vulnerable
Debianlinux-2.65.02.6.26-21~bpo40+1vulnerable
Debianlinux-2.65.02.6.26-22vulnerable
Debianlinux-2.65.02.6.26-22lenny1vulnerable
Debianlinux-2.65.02.6.26-23vulnerable
Debianlinux-2.65.02.6.26-24vulnerable
Debianlinux-2.65.02.6.26-24lenny1vulnerable
Debianlinux-2.65.02.6.26-25vulnerable
Debianlinux-2.65.02.6.26-25lenny1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlinux-2.6deb5.02.6.26-25lenny1Not reportedDSA-2110-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References