CVE-2010-3081

Priority
Description
The compat_alloc_user_space functions in include/asm/compat.h files in the
Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly
allocate the userspace memory required for the 32-bit compatibility layer,
which allows local users to gain privileges by leveraging the ability of
the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt
support) to control a certain length value, related to a "stack pointer
underflow" issue, as exploited in the wild in September 2010.
Ubuntu-Description
Ben Hawkes discovered that the Linux kernel did not correctly validate
memory ranges on 64bit kernels when allocating memory on behalf of 32bit
system calls. On a 64bit system, a local attacker could perform malicious
multicast getsockopt calls to gain root privileges.
Assigned-to
smb
Package
Upstream:released (2.6.36~rc5)
Package
Upstream:released (2.6.36~rc5)
More Information

Updated: 2018-10-31 20:55:43 UTC (commit cfa7cf69d76449ccff972ac22f40976a08d908c2)