CVE-2010-4347
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs...
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
Exploit likelihood
What each source reports
NVD Score used
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
- Record
CVE-2010-4347- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-269
- Updated
- 2026-11-02
CVE List No score
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
- Record
CVE-2010-4347- Updated
- 2026-11-02
EUVDEUVD-2010-4316 No score
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
- Record
EUVD-2010-4316- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vpxp-m77w-89hf No score
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs...
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
- Record
GHSA-vpxp-m77w-89hf- Weakness
- CWE-269
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-rtRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
kernel-rt-debugRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
kernel-rt-debuginfo-commonRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
kernel-rt-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
kernel-rt-docRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
kernel-rt-traceRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-rt-trace-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
perfRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
perf-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 19 CVEs |
before 0:2.6.33.7-rt29.55.el5rt | 0:2.6.33.7-rt29.55.el5rt |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel < 2.6.37-rc2 - 'ACPI custom_method' Local Privilege Escalation | 2010-12-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4347 is a medium vulnerability (CVSS 6.9) in Linux Kernel, published December 22, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.20%, the 82nd percentile. No source names a fixed version.
References
bugzilla.redhat.com/show_bug.cgi?id=663542
secunia.com/advisories/42778
lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html
securityfocus.com/bid/45408
vupen.com/english/advisories/2011/0298
Show 87 moreShow less
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2
openwall.com/lists/oss-security/2010/12/15/3
exploit-db.com/exploits/15774
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ed3aada1bf34c5a9e98af167f125f8a740fc726a
exchange.xforce.ibmcloud.com/vulnerabilities/64155
nvd.nist.gov/vuln/detail/CVE-2010-4347
github.com/advisories/GHSA-vpxp-m77w-89hf
access.redhat.com/errata/RHSA-2011:0330
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/1.3/html/Technical_Notes/chap-Package_Updates.html
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0330.json
cve.org/CVERecord?id=CVE-2010-3477