Every CVE Search/ Get API key

CVE-2010-0298

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level...

6.5 MediumFix available

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306.

Exploit likelihood

2.42%Up 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306.

Record
CVE-2010-0298
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306.

Record
CVE-2010-0298
Updated
2026-11-02
EUVDEUVD-2010-0329 No score

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306.

Record
EUVD-2010-0329
Updated
2026-11-03
GitHub AdvisoriesGHSA-h7hj-hjcj-pwpj No score

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level...

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306.

Record
GHSA-h7hj-hjcj-pwpj
Updated
2026-11-02
OSVAZL-6514 No score

CVE-2010-0298 affecting package kernel for versions less than 5.10.78.1-1

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306.

Record
AZL-6514
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Azure Linux:2
 before 5.10.78.1-1
5.10.78.1-1
linux-2.6
Debian:5.0
From an advisory covering 13 CVEs
 before 2.6.26-21lenny3, plus listed versions
2.6.26-132.6.26-13lenny22.6.26-13lenny2~bpo40+12.6.26-142.6.26-15
Show 22 moreShow less
2.6.26-15lenny12.6.26-15lenny22.6.26-15lenny32.6.26-15~bpo40+12.6.26-15~bpo40+22.6.26-162.6.26-172.6.26-17lenny12.6.26-17lenny22.6.26-17lenny2~bpo40+12.6.26-17~bpo40+12.6.26-182.6.26-192.6.26-19lenny12.6.26-19lenny22.6.26-19~bpo40+12.6.26-202.6.26-20~bpo40+12.6.26-212.6.26-21lenny12.6.26-21lenny22.6.26-21~bpo40+1
2.6.26-21lenny3
kvm
Debian:5.0
From an advisory covering 4 CVEs
 before 72+dfsg-5~lenny5, plus listed versions
72+dfsg-472+dfsg-5~lenny172+dfsg-5~lenny272+dfsg-5~lenny372+dfsg-5~lenny4
72+dfsg-5~lenny5
kmod-kvm
Red Hat:rhel_virtualization:5::client
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm
Red Hat:rhel_virtualization:5::client
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm-debuginfo
Red Hat:rhel_virtualization:5::client
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm-qemu-img
Red Hat:rhel_virtualization:5::client
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm-tools
Red Hat:rhel_virtualization:5::client
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kmod-kvm
Red Hat:rhel_virtualization:5::server
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm
Red Hat:rhel_virtualization:5::server
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
Show 5 moreShow less
Affected packages
PackageAffectedFixed
kvm-debuginfo
Red Hat:rhel_virtualization:5::server
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm-qemu-img
Red Hat:rhel_virtualization:5::server
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm-tools
Red Hat:rhel_virtualization:5::server
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
rhev-hypervisor
Red Hat:enterprise_linux:5::hypervisor
From an advisory covering 8 CVEs
 before 0:5.4-2.1.8.el5_4rhev2_1
0:5.4-2.1.8.el5_4rhev2_1
rhev-hypervisor-pxe
Red Hat:enterprise_linux:5::hypervisor
From an advisory covering 8 CVEs
 before 0:5.4-2.1.8.el5_4rhev2_1
0:5.4-2.1.8.el5_4rhev2_1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-0298 is a medium vulnerability (CVSS 6.5) in Debian Linux, published February 12, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.42%, the 84th percentile. Fixed in kernel 5.10.78.1-1.

References

Show 58 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open