Severity : High Published : 2010-09-24 Modified : 2012-03-19 Base Score : 7.2 Details : The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010. Product/Version : CGE 5.x   Mobilinux 5.x   Professional PRO 5.0   Pro 4.x   CGE 4.x   Mobilinux 4.x   CGE 5.x   Mobilinux 5.x   Pro 4.x   CGE 4.x   Mobilinux 4.x   Carrier Grade CGE 6.0

CVE-2010-4819 CVE-2010-4818 CVE-2010-4805 CVE-2010-4668 CVE-2010-4656 CVE-2010-4652 CVE-2010-4649 CVE-2010-4529 CVE-2010-4527 CVE-2010-4526 CVE-2010-4411 CVE-2010-4347 CVE-2010-4346 CVE-2010-4343 CVE-2010-4342 CVE-2010-4263 CVE-2010-4258 CVE-2010-4252 CVE-2010-4251 CVE-2010-4249 CVE-2010-4248 CVE-2010-4242 CVE-2010-4221 CVE-2010-4180 CVE-2010-4175 CVE-2010-4169 CVE-2010-4164 CVE-2010-4162 CVE-2010-4161 CVE-2010-4160 CVE-2010-4158 CVE-2010-4157 CVE-2010-4083 CVE-2010-4081 CVE-2010-4080 CVE-2010-4078 CVE-2010-4076 CVE-2010-4075 CVE-2010-4074 CVE-2010-4073 CVE-2010-4072 CVE-2010-4008 CVE-2010-3880 CVE-2010-3877 CVE-2010-3876 CVE-2010-3875 CVE-2010-3873 CVE-2010-3867 CVE-2010-3864 CVE-2010-3859 CVE-2010-3858 CVE-2010-3856 CVE-2010-3850 CVE-2010-3849 CVE-2010-3848 CVE-2010-3847 CVE-2010-3477 CVE-2010-3442 CVE-2010-3437 CVE-2010-3433 CVE-2010-3432 CVE-2010-3316 CVE-2010-3311 CVE-2010-3310 CVE-2010-3297 CVE-2010-3296 CVE-2010-3086 CVE-2010-3084 CVE-2010-3081 CVE-2010-3080 CVE-2010-3079 CVE-2010-3078 CVE-2010-3069 CVE-2010-3067 CVE-2010-3015 CVE-2010-2963 CVE-2010-2954 CVE-2010-2949 CVE-2010-2948 CVE-2010-2946 CVE-2010-2943 CVE-2010-2942 CVE-2010-2939 CVE-2010-2798 CVE-2010-2761 CVE-2010-2653 CVE-2010-2538 CVE-2010-2537 CVE-2010-2531 CVE-2010-2529 CVE-2010-2526 CVE-2010-2524 CVE-2010-2523 CVE-2010-2522 CVE-2010-2521 CVE-2010-2495 CVE-2010-2492 CVE-2010-2484 CVE-2010-2478 CVE-2010-2287 CVE-2010-2284 CVE-2010-2283 CVE-2010-2252 CVE-2010-2249 CVE-2010-2248 CVE-2010-2240 CVE-2010-2233 CVE-2010-2226 CVE-2010-2221 CVE-2010-2199 CVE-2010-2198 CVE-2010-2158 CVE-2010-2067 CVE-2010-2066 CVE-2010-2065 CVE-2010-2059 CVE-2010-1975 CVE-2010-1797 CVE-2010-1748 CVE-2010-1674 CVE-2010-1646 CVE-2010-1643 CVE-2010-1642 CVE-2010-1636 CVE-2010-1623 CVE-2010-1488 CVE-2010-1455 CVE-2010-1450 CVE-2010-1449 CVE-2010-1447 CVE-2010-1446 CVE-2010-1437 CVE-2010-1436 CVE-2010-1411 CVE-2010-1205 CVE-2010-1187 CVE-2010-1173 CVE-2010-1172 CVE-2010-1170 CVE-2010-1169 CVE-2010-1168 CVE-2010-1166 CVE-2010-1163 CVE-2010-1162 CVE-2010-1161 CVE-2010-1160 CVE-2010-1088 CVE-2010-1087 CVE-2010-1086 CVE-2010-1084 CVE-2010-1083 CVE-2010-0830 CVE-2010-0743 CVE-2010-0742 CVE-2010-0740 CVE-2010-0731 CVE-2010-0727 CVE-2010-0624 CVE-2010-0622 CVE-2010-0547 CVE-2010-0542 CVE-2010-0540 CVE-2010-0442 CVE-2010-0437 CVE-2010-0434 CVE-2010-0433 CVE-2010-0426 CVE-2010-0421 CVE-2010-0415 CVE-2010-0410 CVE-2010-0405 CVE-2010-0393 CVE-2010-0382 CVE-2010-0296 CVE-2010-0291 CVE-2010-0290 CVE-2010-0205 CVE-2010-0097 CVE-2010-0015 CVE-2010-0008 CVE-2010-0007 CVE-2010-0006 CVE-2010-0003 CVE-2010-0001