CVE-2010-3850

Linux kernel <2.6.36.2 - Privilege Escalation

Title source: llm

Description

The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.

Exploits (2)

exploitdb WORKING POC
clocallinux
https://www.exploit-db.com/exploits/17787
exploitdb WORKING POC
clocallinux
https://www.exploit-db.com/exploits/15704

Scores

EPSS 0.0009
EPSS Percentile 24.8%

Details

Status published
Products (12)
canonical/ubuntu_linux 6.06
canonical/ubuntu_linux 8.04
canonical/ubuntu_linux 9.10
canonical/ubuntu_linux 10.04
canonical/ubuntu_linux 10.10
debian/debian_linux 5.0
linux/linux_kernel < 2.6.36.2
suse/linux_enterprise_desktop 10 sp3
suse/linux_enterprise_real_time_extension 11 sp1
suse/linux_enterprise_server 9
... and 2 more
Published Dec 30, 2010
Tracked Since Feb 18, 2026