MEDIUM
kernel: sys_move_pages infoleak
Published Feb 17, 2010
4.6
MEDIUMCVSS 2.0
EPSS 1.80%
Description
The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel's node set.
Affected products
No data.
OR
- ≤ 2.6.33
- ≤ 2.6.33
- 2.6.0
- 2.6.1
- 2.6.2
- 2.6.3
- 2.6.4
- 2.6.5
- 2.6.6
- 2.6.7
- 2.6.8
- 2.6.8.1
- 2.6.9
- 2.6.10
- 2.6.11
- 2.6.11.1
- 2.6.11.2
- 2.6.11.3
- 2.6.11.4
- 2.6.11.5
- 2.6.11.6
- 2.6.11.7
- 2.6.11.8
- 2.6.11.9
- 2.6.11.10
- 2.6.11.11
- 2.6.11.12
- 2.6.12
- 2.6.12.1
- 2.6.12.2
- 2.6.12.3
- 2.6.12.4
- 2.6.12.5
- 2.6.12.6
- 2.6.13
- 2.6.13.1
- 2.6.13.2
- 2.6.13.3
- 2.6.13.4
- 2.6.13.5
- 2.6.14
- 2.6.14.1
- 2.6.14.3
- 2.6.14.4
- 2.6.14.5
- 2.6.14.6
- 2.6.14.7
- 2.6.15
- 2.6.15.1
- 2.6.15.2
- 2.6.15.3
- 2.6.15.4
- 2.6.15.5
- 2.6.15.6
- 2.6.15.7
- 2.6.16
- 2.6.16.1
- 2.6.16.2
- 2.6.16.3
- 2.6.16.4
- 2.6.16.5
- 2.6.16.6
- 2.6.16.7
- 2.6.16.8
- 2.6.16.9
- 2.6.16.10
- 2.6.16.11
- 2.6.16.12
- 2.6.16.13
- 2.6.16.14
- 2.6.16.15
- 2.6.16.16
- 2.6.16.17
- 2.6.16.18
- 2.6.16.19
- 2.6.16.20
- 2.6.16.21
- 2.6.16.22
- 2.6.16.23
- 2.6.16.24
- 2.6.16.25
- 2.6.16.26
- 2.6.16.27
- 2.6.16.28
- 2.6.16.29
- 2.6.16.30
- 2.6.16.31
- 2.6.17
- 2.6.17.1
- 2.6.17.2
- 2.6.17.3
- 2.6.17.4
- 2.6.17.5
- 2.6.17.6
- 2.6.17.7
- 2.6.17.8
- 2.6.17.9
- 2.6.17.10
- 2.6.17.11
- 2.6.17.12
- 2.6.17.13
- 2.6.17.14
- 2.6.18.1
- 2.6.18.2
- 2.6.18.3
- 2.6.18.4
- 2.6.18.5
- 2.6.18.6
- 2.6.18.7
- 2.6.18.8
- 2.6.22
- 2.6.22.2
- 2.6.22.3
- 2.6.22.4
- 2.6.22.5
- 2.6.22.6
- 2.6.22.7
- 2.6.23
- 2.6.23
- 2.6.23
- 2.6.23.1
- 2.6.23.2
- 2.6.23.3
- 2.6.23.4
- 2.6.23.5
- 2.6.23.6
- 2.6.23.7
- 2.6.24
- 2.6.24
- 2.6.24
- 2.6.24
- 2.6.24
- 2.6.32
- 2.6.32.1
- 2.6.32.2
- 2.6.32.3
- 2.6.32.4
- 2.6.33
- 2.6.33
- 2.6.33
- 2.6.33
No data.
MRG for RHEL-5
kernel-rt-0:2.6.24.7-149.el5rt
Fixed · RHSA-2010:0161
Red Hat Enterprise Linux 5
kernel-0:2.6.18-164.15.1.el5
Fixed · RHSA-2010:0147
| Product | Package | State | Advisory |
|---|---|---|---|
| MRG for RHEL-5 | kernel-rt-0:2.6.24.7-149.el5rt | Fixed | RHSA-2010:0161 |
| Red Hat Enterprise Linux 5 | kernel-0:2.6.18-164.15.1.el5 | Fixed | RHSA-2010:0147 |
No package ranges for this CVE.
Remediation
Red Hat statement
This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3 and 4, as they do not include support for sys_move_pages. It was only introduced in kernel version 2.6.18 onwards. This issue was addressed in Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2010-0147.html and https://rhn.redhat.com/errata/RHSA-2010-0161.html.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
4.6 MEDIUM NVD
AV:L/AC:L/Au:N/C:P/I:P/A:P
Access Vector Local
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
1.80% 0.01804
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.01804
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (19 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 1.80% (0.01804) | 77.74th | v5 (v2026.06.15) |
| Jun 15, 2026 | 1.82% (0.01819) | 75.85th | v5 (v2026.06.15) |
| Jun 8, 2026 | 6.11% (0.06108) | 90.94th | v4 (v2025.03.14) |
| May 22, 2026 | 4.61% (0.04609) | 89.37th | v4 (v2025.03.14) |
| Mar 16, 2026 | 3.08% (0.03081) | 86.61th | v4 (v2025.03.14) |
| Feb 18, 2026 | 4.89% (0.04886) | 89.35th | v4 (v2025.03.14) |
| Nov 5, 2025 | 3.62% (0.03620) | 87.30th | v4 (v2025.03.14) |
| Sep 26, 2025 | 5.72% (0.05720) | 90.08th | v4 (v2025.03.14) |
| Jun 24, 2025 | 6.99% (0.06988) | 90.98th | v4 (v2025.03.14) |
| Jun 22, 2025 | 8.29% (0.08292) | 91.81th | v4 (v2025.03.14) |
| May 15, 2025 | 6.29% (0.06288) | 90.41th | v4 (v2025.03.14) |
| Mar 30, 2025 | 7.80% (0.07799) | 91.15th | v4 (v2025.03.14) |
| Mar 29, 2025 | 12.78% (0.12775) | 90.00th | v4 (v2025.03.14) |
| Mar 17, 2025 | 10.97% (0.10969) | 92.88th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.04% (0.00042) | 0.34th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.04% (0.00042) | 0.50th | v3 (v2023.03.01) |
| Mar 6, 2023 | 3.22% (0.03220) | 84.21th | v2 (v2022.01.01) |
| Apr 1, 2022 | 3.22% (0.03220) | 82.61th | v2 (v2022.01.01) |
| Feb 4, 2022 | 3.22% (0.03220) | 65.30th | v2 (v2022.01.01) |
Weaknesses (0)
No CWE recorded.
References (31)
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f5a55f1a6c5abee15a0e878e5c74d9f1569b8b0 x_refsource_CONFIRM
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035070.html vendor-advisoryx_refsource_FEDORA
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html vendor-advisoryx_refsource_FEDORA
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html vendor-advisoryx_refsource_SUSE
- http://secunia.com/advisories/38492 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/38557 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/38779 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/38922 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/39033 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/43315 third-party-advisoryx_refsource_SECUNIA
- http://www.debian.org/security/2010/dsa-1996 vendor-advisoryx_refsource_DEBIAN
- http://www.debian.org/security/2010/dsa-2005 vendor-advisoryx_refsource_DEBIAN
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7 x_refsource_CONFIRMPatch
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:066 vendor-advisoryx_refsource_MANDRIVA
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 vendor-advisoryx_refsource_MANDRIVA
- http://www.openwall.com/lists/oss-security/2010/02/07/1 mailing-listx_refsource_MLIST
- http://www.openwall.com/lists/oss-security/2010/02/07/2 mailing-listx_refsource_MLIST
- http://www.openwall.com/lists/oss-security/2010/02/08/2 mailing-listx_refsource_MLIST
- http://www.redhat.com/support/errata/RHSA-2010-0147.html vendor-advisoryx_refsource_REDHAT
- http://www.redhat.com/support/errata/RHSA-2010-0161.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/archive/1/516397/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/38144 vdb-entryx_refsource_BID
- http://www.ubuntu.com/usn/USN-914-1 vendor-advisoryx_refsource_UBUNTU
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html x_refsource_CONFIRM
- http://www.vupen.com/english/advisories/2010/0638 vdb-entryx_refsource_VUPEN
- https://access.redhat.com/security/cve/CVE-2010-0415 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=562582 x_refsource_CONFIRMIssue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2010-0415
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9399 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2010-0415
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Feb 17, 2010
Updated Aug 7, 2024
Reserved Jan 27, 2010
Link CVE-2010-0415
CISA Vulnrichment
Updated n/a