CVE catalog

CVE-2010-4668

linux-2.6 - several issues

[CVE catalog]

The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4163. kernel: panic when submitting certain 0-length I/O requests This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5 as they did not backport the upstream commit c5dec1c3 that introduced the issue. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0007.html and https://rhn.redhat.com/errata/RHSA-2011-0330.html. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.40% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debian5.0linux-2.62.6.26-13UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-13lenny2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-13lenny2~bpo40+1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-14UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-15UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-15lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-15lenny2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-15lenny3UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-15~bpo40+1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-15~bpo40+2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-16UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-17UnknownSource applicability is not established[DSA-2153-1]

Showing 12 observations. All 58 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debian5.0linux-2.62.6.26-13UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-13lenny2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-13lenny2~bpo40+1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-14UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-15UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-15lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-15lenny2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-15lenny3UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-15~bpo40+1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-15~bpo40+2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-16UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-17UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-17lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-17lenny2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-17lenny2~bpo40+1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-17~bpo40+1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-18UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-19UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-19lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-19lenny2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-19~bpo40+1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-20UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-20~bpo40+1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-21UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-21lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-21lenny2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-21lenny3UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-21lenny4UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-21~bpo40+1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-22UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-22lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-23UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-24UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-24lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-25UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-25lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-26UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-26lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0linux-2.62.6.26-26lenny2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+15UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+15lenny2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+15lenny3UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+16UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+17lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+17lenny2UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+19UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+19lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+21UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+21lenny3UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+21lenny4UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+22lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+24UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+24lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+25lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+26UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+26lenny1UnknownSource applicability is not established[DSA-2153-1]
Debian5.0user-mode-linux2.6.26-1um-2+26lenny2UnknownSource applicability is not established[DSA-2153-1]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "linux-2.6",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.26-26lenny2"
            }
          ]
        }
      ],
      "release": "5.0",
      "versions": [
        "2.6.26-13",
        "2.6.26-13lenny2",
        "2.6.26-13lenny2~bpo40+1",
        "2.6.26-14",
        "2.6.26-15",
        "2.6.26-15lenny1",
        "2.6.26-15lenny2",
        "2.6.26-15lenny3",
        "2.6.26-15~bpo40+1",
        "2.6.26-15~bpo40+2",
        "2.6.26-16",
        "2.6.26-17",
        "2.6.26-17lenny1",
        "2.6.26-17lenny2",
        "2.6.26-17lenny2~bpo40+1",
        "2.6.26-17~bpo40+1",
        "2.6.26-18",
        "2.6.26-19",
        "2.6.26-19lenny1",
        "2.6.26-19lenny2",
        "2.6.26-19~bpo40+1",
        "2.6.26-20",
        "2.6.26-20~bpo40+1",
        "2.6.26-21",
        "2.6.26-21lenny1",
        "2.6.26-21lenny2",
        "2.6.26-21lenny3",
        "2.6.26-21lenny4",
        "2.6.26-21~bpo40+1",
        "2.6.26-22",
        "2.6.26-22lenny1",
        "2.6.26-23",
        "2.6.26-24",
        "2.6.26-24lenny1",
        "2.6.26-25",
        "2.6.26-25lenny1",
        "2.6.26-26",
        "2.6.26-26lenny1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DSA-2153-1",
      "fixed_version": "2.6.26-26lenny2",
      "provider_source": "pypi",
      "provider_record_id": "DSA-2153-1",
      "provider_updated_at": "2026-03-09T01:20:42.637354Z",
      "applicability_unknown": true
    },
    {
      "name": "user-mode-linux",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.26-1um-2+26lenny2"
            }
          ]
        }
      ],
      "release": "5.0",
      "versions": [
        "2.6.26-1um-2",
        "2.6.26-1um-2+15",
        "2.6.26-1um-2+15lenny2",
        "2.6.26-1um-2+15lenny3",
        "2.6.26-1um-2+16",
        "2.6.26-1um-2+17lenny1",
        "2.6.26-1um-2+17lenny2",
        "2.6.26-1um-2+19",
        "2.6.26-1um-2+19lenny1",
        "2.6.26-1um-2+21",
        "2.6.26-1um-2+21lenny3",
        "2.6.26-1um-2+21lenny4",
        "2.6.26-1um-2+22lenny1",
        "2.6.26-1um-2+24",
        "2.6.26-1um-2+24lenny1",
        "2.6.26-1um-2+25lenny1",
        "2.6.26-1um-2+26",
        "2.6.26-1um-2+26lenny1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DSA-2153-1",
      "fixed_version": "2.6.26-1um-2+26lenny2",
      "provider_source": "pypi",
      "provider_record_id": "DSA-2153-1",
      "provider_updated_at": "2026-03-09T01:20:42.637354Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]