CVE-2010-1162

Linux kernel <2.6.34-rc4 - Info Disclosure

Title source: llm
STIX 2.1

Description

The release_one_tty function in drivers/char/tty_io.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the put_pid function, which has unspecified impact and local attack vectors.

References (13)

Core 13
Core References
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=582076
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/04/16/1
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/04/15/1
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/04/14/1
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40645
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/04/15/2
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2010/dsa-2053
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39830
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1857

Scores

EPSS 0.0041
EPSS Percentile 33.5%

Details

Status published
Products (50)
linux/linux_kernel 2.6.0
linux/linux_kernel 2.6.1
linux/linux_kernel 2.6.2
linux/linux_kernel 2.6.3
linux/linux_kernel 2.6.4
linux/linux_kernel 2.6.5
linux/linux_kernel 2.6.6
linux/linux_kernel 2.6.7
linux/linux_kernel 2.6.8
linux/linux_kernel 2.6.8.1
... and 40 more
Published Apr 20, 2010
Tracked Since Feb 18, 2026