$ cve CVE-2010-3301 JSON

CVE-2010-3301 EXPLOIT

7.2

HIGH · CVSS 2.0 · EPSS 3.8% (pctl 90)

Patch early

A public exploit exists.

Description

The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-bounds access to the system call table using the %rax register. NOTE: this vulnerability exists because of a CVE-2007-4573 regression.

Scoring

CVSS	7.2 (HIGH, v2.0)
Vector	AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS	3.82% — more likely to be exploited than 90% of all CVEs
Weakness	CWE-269
On CISA KEV	no
Public exploit	yes
Published	2010-09-22
Last modified	2026-06-16

Affected (3)

Vendor	Product
canonical	ubuntu linux
linux	linux kernel
suse	linux enterprise real time extension

Public exploits

Source	Title	Date
exploit-db	Linux Kernel < 2.6.36-rc4-git2 (x86-64) - 'ia32syscall' Emulation Privilege Escalation	2010-09-16

References

→ the Explorer · watch your stack · NVD