CVE-2010-4656

[CVE catalog]

Severity

High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Published

Jan 30, 2011, 12:00:00 AM UTC

Updated

Mar 9, 2026, 1:20:42 AM UTC

Source

[NVD] · [CVE record]

EPSS

0.40% · Oct 25, 2026

The iowarrior_write function in drivers/usb/misc/iowarrior.c in the Linux kernel before 2.6.37 does not properly allocate memory, which might allow local users to trigger a heap-based buffer overflow, and consequently cause a denial of service or gain privileges, via a long report. kernel: iowarrior usb device heap overflow This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5 as they do not have support for the I/O-Warrior USB devices. This has been addressed in Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0330.html. A future kernel update in Red Hat Enterprise Linux 6 may address this flaw. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.