CVE-2010-2243 A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current...
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current_clocksource results in an OOPS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | < 2.6.33 | 2.6.33 |
| linux-2.6 | = before 2.6.33 | No fix listed |
References
- access.redhat.com third-party-advisory
- git.kernel.org mailing-list patch vendor-advisory
- security-tracker.debian.org third-party-advisory
- [oss-security] 20100625 Re: CVE request: kernel: timekeeping: Prevent oops when GENERIC_TIME=n mailing-list patch third-party-advisory