Every CVE Search/ Get API key

CVE-2010-0741

The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux...

7.8 HighFix available

The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).

Exploit likelihood

3.52%Up 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).

Record
CVE-2010-0741
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).

Record
CVE-2010-0741
Updated
2026-11-02
EUVDEUVD-2010-0767 No score

The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).

Record
EUVD-2010-0767
Updated
2026-11-03
GitHub AdvisoriesGHSA-4pfr-xwjj-chc8 No score

The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux...

The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).

Record
GHSA-4pfr-xwjj-chc8
Weakness
CWE-20
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kmod-kvm
Red Hat:rhel_virtualization:5::client
 before 0:83-164.el5
0:83-164.el5
kvm
Red Hat:rhel_virtualization:5::client
 before 0:83-164.el5
0:83-164.el5
kvm-debuginfo
Red Hat:rhel_virtualization:5::client
 before 0:83-164.el5
0:83-164.el5
kvm-qemu-img
Red Hat:rhel_virtualization:5::client
 before 0:83-164.el5
0:83-164.el5
kvm-tools
Red Hat:rhel_virtualization:5::client
 before 0:83-164.el5
0:83-164.el5
kmod-kvm
Red Hat:rhel_virtualization:5::server
 before 0:83-164.el5
0:83-164.el5
kvm
Red Hat:rhel_virtualization:5::server
 before 0:83-164.el5
0:83-164.el5
kvm-debuginfo
Red Hat:rhel_virtualization:5::server
 before 0:83-164.el5
0:83-164.el5
kvm-qemu-img
Red Hat:rhel_virtualization:5::server
 before 0:83-164.el5
0:83-164.el5
kvm-tools
Red Hat:rhel_virtualization:5::server
 before 0:83-164.el5
0:83-164.el5
rhev-hypervisor
Red Hat:enterprise_linux:5::hypervisor
 before 0:5.5-2.2.4.2.el5rhev
0:5.5-2.2.4.2.el5rhev
rhev-hypervisor-pxe
Red Hat:enterprise_linux:5::hypervisor
 before 0:5.5-2.2.4.2.el5rhev
0:5.5-2.2.4.2.el5rhev

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-0741 is a high vulnerability (CVSS 7.8) in Linux Kernel, published April 12, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.52%, the 89th percentile. Fixed in kmod-kvm 0:83-164.el5.

References

Show 92 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open