CVE-2010-1173
The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and...
The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.
Exploit likelihood
What each source reports
NVD Score used
7.1
The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.
- Record
CVE-2010-1173- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.
- Record
CVE-2010-1173- Updated
- 2026-11-02
EUVDEUVD-2010-1203 No score
The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.
- Record
EUVD-2010-1203- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c3vg-xm2h-hqc2 No score
The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and...
The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.
- Record
GHSA-c3vg-xm2h-hqc2- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVSUSE-SU-2015:0652-1 No score
Security update for Kernel
The SUSE Linux Enterprise 11 SP1 Teradata kernel was updated to fix bugs and security issues.
Following security issues were fixed:
CVE-2011-1083: Limit the path length users can build using epoll() to avoid local attackers consuming lots of kernel CPU time.
CVE-2011-4086: Fixed a oops in jbd/jbd2 that could be caused by specific filesystem access patterns.
CVE-2011-4622: KVM: Prevent starting PIT timers in the absence of irqchip support.
CVE-2012-0045: KVM: Extend 'struct x86_emulate_ops' with 'get_cpuid' and fix missing checks in syscall emulation.
CVE-2012-0879: Fix io_context leak after clone with CLONE_IO.
CVE-2012-1090: Fixed a dentry refcount leak in the CIFS file system that could lead to a crash on unmount.
CVE-2012-1097: The regset common infrastructure assumed that regsets would always have .get and .set methods, but necessarily .active methods. Unfortunately people have since written regsets without .set method, so NULL pointer dereference attacks were possible.
Following non-security issues were fixed:
* SCSI inquiry doesn't return data on SLES 11-SP1 Xen VMs (bnc#745929).
* FC transport driver killing off the timers/work queues (bnc#734300).
* The driver ixgbevf doesn't work on newer SLES 11-SP1 kernels
(bnc#752972).
* Pack sparsemem memmap sections closer together and in higher zones
(bnc#743870).
Following feature was implemented:
* The megaraid_sas driver update to version 5.40-LSI (bnc#736813).
Security Issues:
* CVE-2011-1083
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1083>
* CVE-2011-4086
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4086>
* CVE-2011-4622
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4622>
* CVE-2012-0045
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0045>
* CVE-2012-0879
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0879>
* CVE-2012-1090
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1090>
* CVE-2012-1097
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1097>
- Record
SUSE-SU-2015:0652-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:5.0 From an advisory covering 13 CVEs |
before 2.6.26-22lenny1, plus listed versions 2.6.26-132.6.26-13lenny22.6.26-13lenny2~bpo40+12.6.26-142.6.26-15 Show 25 moreShow less2.6.26-15lenny12.6.26-15lenny22.6.26-15lenny32.6.26-15~bpo40+12.6.26-15~bpo40+22.6.26-162.6.26-172.6.26-17lenny12.6.26-17lenny22.6.26-17lenny2~bpo40+12.6.26-17~bpo40+12.6.26-182.6.26-192.6.26-19lenny12.6.26-19lenny22.6.26-19~bpo40+12.6.26-202.6.26-20~bpo40+12.6.26-212.6.26-21lenny12.6.26-21lenny22.6.26-21lenny32.6.26-21lenny42.6.26-21~bpo40+12.6.26-22 |
2.6.26-22lenny1 |
kernelRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
Show 85 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-xenURed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-xenURed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-xenURed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:2.6.9-89.0.26.EL | 0:2.6.9-89.0.26.EL |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:2.6.18-194.8.1.el5 | 0:2.6.18-194.8.1.el5 |
kernel-rtRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-debugRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-debuginfo-commonRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-docRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-firmwareRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-traceRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6.33.3 - SCTP INIT Remote Denial of Service | 2010-08-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1173 is a high vulnerability (CVSS 7.1) in Linux Kernel, published May 7, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 21.2%, the 97th percentile. No source names a fixed version.
References
openwall.com/lists/oss-security/2010/04/29/1
mandriva.com/security/advisories?name=MDVSA-2010:198
article.gmane.org/gmane.linux.network/159531
openwall.com/lists/oss-security/2010/04/29/6
redhat.com/support/errata/RHSA-2010-0474.html
secunia.com/advisories/43315
Show 194 moreShow less
kbase.redhat.com/faq/docs/DOC-31052
bugzilla.redhat.com/show_bug.cgi?id=584645
git.kernel.org?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=5fa782c2f5ef6c2e4f04d3e228412c9b4a4c8809
secunia.com/advisories/40218
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11416
vmware.com/security/advisories/VMSA-2011-0003.html
debian.org/security/2010/dsa-2053
securityfocus.com/archive/1/516397/100/0/threaded
secunia.com/advisories/39830
marc.info?l=oss-security&m=127251068407878&w=2
nvd.nist.gov/vuln/detail/CVE-2010-1173
git.kernel.org?p=linux/kernel/git/davem/net-2.6.git;a=commit;h=5fa782c2f5ef6c2e4f04d3e228412c9b4a4c8809
access.redhat.com/errata/RHSA-2010:0474
access.redhat.com/errata/RHSA-2010:0504
access.redhat.com/errata/RHSA-2010:0631
access.redhat.com/security/cve/CVE-2010-1173
github.com/advisories/GHSA-c3vg-xm2h-hqc2
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=529227
bugzilla.redhat.com/show_bug.cgi?id=585094
bugzilla.redhat.com/show_bug.cgi?id=589155
bugzilla.redhat.com/show_bug.cgi?id=590551
bugzilla.redhat.com/show_bug.cgi?id=596372
bugzilla.redhat.com/show_bug.cgi?id=596374
bugzilla.redhat.com/show_bug.cgi?id=597310
bugzilla.redhat.com/show_bug.cgi?id=597312
bugzilla.redhat.com/show_bug.cgi?id=597314
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0474.json
access.redhat.com/security/cve/CVE-2009-3726
cve.org/CVERecord?id=CVE-2009-3726
nvd.nist.gov/vuln/detail/CVE-2009-3726
cve.org/CVERecord?id=CVE-2010-1173
access.redhat.com/security/cve/CVE-2010-1437
cve.org/CVERecord?id=CVE-2010-1437
nvd.nist.gov/vuln/detail/CVE-2010-1437
redhat.com/docs/en-US/errata/RHSA-2010-0504/Kernel_Security_Update/index.html
bugzilla.redhat.com/show_bug.cgi?id=556703
bugzilla.redhat.com/show_bug.cgi?id=563091
bugzilla.redhat.com/show_bug.cgi?id=567184
bugzilla.redhat.com/show_bug.cgi?id=567813
bugzilla.redhat.com/show_bug.cgi?id=578057
bugzilla.redhat.com/show_bug.cgi?id=586006
bugzilla.redhat.com/show_bug.cgi?id=587957
bugzilla.redhat.com/show_bug.cgi?id=588219
bugzilla.redhat.com/show_bug.cgi?id=591493
bugzilla.redhat.com/show_bug.cgi?id=591611
bugzilla.redhat.com/show_bug.cgi?id=592844
bugzilla.redhat.com/show_bug.cgi?id=592846
bugzilla.redhat.com/show_bug.cgi?id=594054
bugzilla.redhat.com/show_bug.cgi?id=594057
bugzilla.redhat.com/show_bug.cgi?id=594061
bugzilla.redhat.com/show_bug.cgi?id=595579
bugzilla.redhat.com/show_bug.cgi?id=596384
bugzilla.redhat.com/show_bug.cgi?id=596385
bugzilla.redhat.com/show_bug.cgi?id=598355
bugzilla.redhat.com/show_bug.cgi?id=599332
bugzilla.redhat.com/show_bug.cgi?id=599730
bugzilla.redhat.com/show_bug.cgi?id=599734
bugzilla.redhat.com/show_bug.cgi?id=599737
bugzilla.redhat.com/show_bug.cgi?id=599739
bugzilla.redhat.com/show_bug.cgi?id=600215
bugzilla.redhat.com/show_bug.cgi?id=600498
bugzilla.redhat.com/show_bug.cgi?id=601080
bugzilla.redhat.com/show_bug.cgi?id=601090
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0504.json
access.redhat.com/security/cve/CVE-2010-0291
cve.org/CVERecord?id=CVE-2010-0291
nvd.nist.gov/vuln/detail/CVE-2010-0291
access.redhat.com/security/cve/CVE-2010-0622
cve.org/CVERecord?id=CVE-2010-0622
nvd.nist.gov/vuln/detail/CVE-2010-0622
access.redhat.com/security/cve/CVE-2010-1087
cve.org/CVERecord?id=CVE-2010-1087
nvd.nist.gov/vuln/detail/CVE-2010-1087
access.redhat.com/security/cve/CVE-2010-1088
cve.org/CVERecord?id=CVE-2010-1088
nvd.nist.gov/vuln/detail/CVE-2010-1088
access.redhat.com/security/cve/CVE-2010-1187
cve.org/CVERecord?id=CVE-2010-1187
nvd.nist.gov/vuln/detail/CVE-2010-1187
access.redhat.com/security/cve/CVE-2010-1436
cve.org/CVERecord?id=CVE-2010-1436
nvd.nist.gov/vuln/detail/CVE-2010-1436
access.redhat.com/security/cve/CVE-2010-1641
cve.org/CVERecord?id=CVE-2010-1641
nvd.nist.gov/vuln/detail/CVE-2010-1641
access.redhat.com/security/updates/classification
redhat.com/docs/en-US/errata/RHSA-2010-0631/Kernel_Security_Update/index.html
access.redhat.com/kb/docs/DOC-31052
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0631.json
access.redhat.com/security/cve/CVE-2008-7256
cve.org/CVERecord?id=CVE-2008-7256
nvd.nist.gov/vuln/detail/CVE-2008-7256
access.redhat.com/security/cve/CVE-2009-4138
cve.org/CVERecord?id=CVE-2009-4138
nvd.nist.gov/vuln/detail/CVE-2009-4138
access.redhat.com/security/cve/CVE-2010-1083
cve.org/CVERecord?id=CVE-2010-1083
nvd.nist.gov/vuln/detail/CVE-2010-1083
access.redhat.com/security/cve/CVE-2010-1084
cve.org/CVERecord?id=CVE-2010-1084
nvd.nist.gov/vuln/detail/CVE-2010-1084
access.redhat.com/security/cve/CVE-2010-1086
cve.org/CVERecord?id=CVE-2010-1086
nvd.nist.gov/vuln/detail/CVE-2010-1086
access.redhat.com/security/cve/CVE-2010-1162
cve.org/CVERecord?id=CVE-2010-1162
nvd.nist.gov/vuln/detail/CVE-2010-1162
access.redhat.com/security/cve/CVE-2010-1643
cve.org/CVERecord?id=CVE-2010-1643
nvd.nist.gov/vuln/detail/CVE-2010-1643
access.redhat.com/security/cve/CVE-2010-2240
cve.org/CVERecord?id=CVE-2010-2240
nvd.nist.gov/vuln/detail/CVE-2010-2240
access.redhat.com/security/cve/CVE-2010-2248
cve.org/CVERecord?id=CVE-2010-2248
nvd.nist.gov/vuln/detail/CVE-2010-2248
access.redhat.com/security/cve/CVE-2010-2521
cve.org/CVERecord?id=CVE-2010-2521
nvd.nist.gov/vuln/detail/CVE-2010-2521
suse.com/support/update/announcement/2015/suse-su-20150652-1
bugzilla.suse.com/466279
bugzilla.suse.com/468397
bugzilla.suse.com/501563
bugzilla.suse.com/529535
bugzilla.suse.com/552250
bugzilla.suse.com/557710
bugzilla.suse.com/558740
bugzilla.suse.com/564324
bugzilla.suse.com/564423
bugzilla.suse.com/566768
bugzilla.suse.com/573330
bugzilla.suse.com/574006
bugzilla.suse.com/577967
bugzilla.suse.com/578572
bugzilla.suse.com/580373
bugzilla.suse.com/582730
bugzilla.suse.com/584493
bugzilla.suse.com/585385
bugzilla.suse.com/588929
bugzilla.suse.com/594362
bugzilla.suse.com/595215
bugzilla.suse.com/596113
bugzilla.suse.com/596646
bugzilla.suse.com/598308
bugzilla.suse.com/598493
bugzilla.suse.com/598677
bugzilla.suse.com/599508
bugzilla.suse.com/599671
bugzilla.suse.com/600043
bugzilla.suse.com/600256
bugzilla.suse.com/600375
bugzilla.suse.com/600579
bugzilla.suse.com/601520
bugzilla.suse.com/602150
bugzilla.suse.com/602232
bugzilla.suse.com/602838
bugzilla.suse.com/602969
suse.com/security/cve/CVE-2010-1173
suse.com/security/cve/CVE-2010-1641
suse.com/security/cve/CVE-2010-2066
suse.com/security/cve/CVE-2010-2478
suse.com/security/cve/CVE-2010-2495
suse.com/security/cve/CVE-2010-2521
suse.com/security/cve/CVE-2010-2524
suse.com/security/cve/CVE-2010-2537
suse.com/security/cve/CVE-2010-2538
suse.com/security/cve/CVE-2010-2798
suse.com/security/cve/CVE-2010-2803
suse.com/security/cve/CVE-2010-2942
suse.com/security/cve/CVE-2010-2943
suse.com/security/cve/CVE-2010-2946
suse.com/security/cve/CVE-2010-2954
suse.com/security/cve/CVE-2010-2955
suse.com/security/cve/CVE-2010-2959
suse.com/security/cve/CVE-2010-2960
suse.com/security/cve/CVE-2010-2962
suse.com/security/cve/CVE-2010-2963
suse.com/security/cve/CVE-2010-3015
suse.com/security/cve/CVE-2010-3078
suse.com/security/cve/CVE-2010-3079
suse.com/security/cve/CVE-2010-3080
suse.com/security/cve/CVE-2010-3081
suse.com/security/cve/CVE-2010-3084
suse.com/security/cve/CVE-2010-3296
suse.com/security/cve/CVE-2010-3297
suse.com/security/cve/CVE-2010-3298
suse.com/security/cve/CVE-2010-3301
suse.com/security/cve/CVE-2010-3310
suse.com/security/cve/CVE-2010-3437
suse.com/security/cve/CVE-2010-3699
suse.com/security/cve/CVE-2010-3705
suse.com/security/cve/CVE-2010-3858
suse.com/security/cve/CVE-2010-3861
Left out here: 1,009 references. The JSON record has them.