A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current_clocksource results in an OOPS
Published Nov 7, 2019
7.5
HIGHCVSS 3.1
EPSS 2.50%
Description
A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current_clocksource results in an OOPS.
Affected products
-
- Version before 2.6.33StatusaffectedConstraints-
- Version
- < 2.6.33
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Red Hat statement
Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG: Red Hat Enterprise Linux 3 and 4 did not have the 'current_clocksource' file in /sys/; Red Hat Enterprise Linux 5 restricted 'current_clocksource' to only the root user; and Red Hat Enterprise MRG enabled CONFIG_GENERIC_TIME by default.
References (7)
- https://access.redhat.com/security/cve/CVE-2010-2243 Vendor Advisory
- https://access.redhat.com/security/cve/cve-2010-2243 x_refsource_MISCThird Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad6759fbf35d104dbf573cd6f4c6784ad6823f7e x_refsource_CONFIRMMailing ListPatchVendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2010-2243
- https://security-tracker.debian.org/tracker/CVE-2010-2243 x_refsource_MISCThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2010-2243
- https://www.openwall.com/lists/oss-security/2010/06/25/1 mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2010-2243 | Vendor Advisory | |
| https://access.redhat.com/security/cve/cve-2010-2243 | x_refsource_MISCThird Party Advisory | |
| https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad6759fbf35d104dbf573cd6f4c6784ad6823f7e | x_refsource_CONFIRMMailing ListPatchVendor Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2010-2243 | ||
| https://security-tracker.debian.org/tracker/CVE-2010-2243 | x_refsource_MISCThird Party Advisory | |
| https://www.cve.org/CVERecord?id=CVE-2010-2243 | ||
| https://www.openwall.com/lists/oss-security/2010/06/25/1 | mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory |
Change history (0)
No recorded changes yet.