MEDIUM
kernel: prevent heap corruption in snd_ctl_new()
Published Oct 4, 2010
4.7
MEDIUMCVSS 2.0
EPSS 0.40%
Description
Multiple integer overflows in the snd_ctl_new function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) SNDRV_CTL_IOCTL_ELEM_ADD or (2) SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl call.
Affected products
No data.
Configuration 1
OR
- < 2.6.36
- 2.6.36
- 2.6.36
- 2.6.36
- 2.6.36
- 2.6.36
Configuration 2
- 13
Configuration 3
OR
- 11.2
- 11.3
- 10
- 11
- 9
- 10
- 10
Configuration 4
- 5.0
Configuration 5
OR
- 6.06
- 8.04
- 9.04
- 9.10
- 10.04
- 10.10
No data.
MRG for RHEL-5
kernel-rt-0:2.6.33.7-rt29.47.el5rt
Fixed · RHSA-2010:0958
Red Hat Enterprise Linux 4
kernel-0:2.6.9-89.33.1.EL
Fixed · RHSA-2010:0936
Red Hat Enterprise Linux 5
kernel-0:2.6.18-194.32.1.el5
Fixed · RHSA-2011:0004
Red Hat Enterprise Linux 6
kernel-0:2.6.32-71.7.1.el6
Fixed · RHSA-2010:0842
| Product | Package | State | Advisory |
|---|---|---|---|
| MRG for RHEL-5 | kernel-rt-0:2.6.33.7-rt29.47.el5rt | Fixed | RHSA-2010:0958 |
| Red Hat Enterprise Linux 4 | kernel-0:2.6.9-89.33.1.EL | Fixed | RHSA-2010:0936 |
| Red Hat Enterprise Linux 5 | kernel-0:2.6.18-194.32.1.el5 | Fixed | RHSA-2011:0004 |
| Red Hat Enterprise Linux 6 | kernel-0:2.6.32-71.7.1.el6 | Fixed | RHSA-2010:0842 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
4.7 MEDIUM NVD
AV:L/AC:M/Au:N/C:N/I:N/A:C
Access Vector Local
Access Complexity Medium
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Complete
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
0.40% 0.00395
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.00395
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (10 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.40% (0.00395) | 31.24th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.40% (0.00395) | 31.04th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.17% (0.00172) | 36.12th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.04% (0.00044) | 11.89th | v3 (v2023.03.01) |
| Jul 2, 2024 | 0.04% (0.00044) | 10.25th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.04% (0.00044) | 8.24th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.55% (0.01547) | 74.98th | v2 (v2022.01.01) |
| Feb 23, 2023 | 1.55% (0.01547) | 74.94th | v2 (v2022.01.01) |
| Apr 1, 2022 | 1.55% (0.01547) | 72.92th | v2 (v2022.01.01) |
| Feb 4, 2022 | 1.55% (0.01547) | 51.82th | v2 (v2022.01.01) |
Weaknesses (1)
References (39)
- http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=5591bf07225523600450edd9e6ad258bb877b779 x_refsource_CONFIRM
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html vendor-advisoryx_refsource_FEDORAThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://secunia.com/advisories/42400 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/42745 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/42778 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/42789 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/42801 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/43291 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/46397 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://www.debian.org/security/2010/dsa-2126 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc5-next-20100928.bz2 x_refsource_CONFIRMBroken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:257 vendor-advisoryx_refsource_MANDRIVAThird Party Advisory
- http://www.openwall.com/lists/oss-security/2010/09/29/2 mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
- http://www.openwall.com/lists/oss-security/2010/09/29/3 mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
- http://www.openwall.com/lists/oss-security/2010/09/29/4 mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
- http://www.openwall.com/lists/oss-security/2010/09/29/9 mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0842.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0936.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0958.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2011-0004.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://www.securityfocus.com/archive/1/520102/100/0/threaded mailing-listx_refsource_BUGTRAQThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/43787 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-1000-1 vendor-advisoryx_refsource_UBUNTUThird Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html x_refsource_CONFIRMThird Party Advisory
- http://www.vupen.com/english/advisories/2010/3113 vdb-entryx_refsource_VUPENThird Party Advisory
- http://www.vupen.com/english/advisories/2010/3321 vdb-entryx_refsource_VUPENThird Party Advisory
- http://www.vupen.com/english/advisories/2011/0012 vdb-entryx_refsource_VUPENThird Party Advisory
- http://www.vupen.com/english/advisories/2011/0024 vdb-entryx_refsource_VUPENThird Party Advisory
- http://www.vupen.com/english/advisories/2011/0298 vdb-entryx_refsource_VUPENThird Party Advisory
- http://www.vupen.com/english/advisories/2011/0375 vdb-entryx_refsource_VUPENThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2010-3442 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=638478 x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2010-3442
- https://www.cve.org/CVERecord?id=CVE-2010-3442
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Oct 4, 2010
Updated Aug 7, 2024
Reserved Sep 17, 2010
Link CVE-2010-3442
CISA Vulnrichment
Updated n/a