CVE-2010-1148
The cifs_create function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a NULL nameidata (aka nd) field in a POSIX file-creation request to a server that supports UNIX extensions.
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
- CWE
- CWE-476
- Published
- Modified
- Record from
- the NVD, synced
Affected
- linux:linux_kernel
References
- http://lists.samba.org/archive/linux-cifs-client/2010-April/005741.html
- http://lists.samba.org/archive/linux-cifs-client/2010-April/005742.html
- http://lists.samba.org/archive/linux-cifs-client/2010-April/005746.html
- http://lists.samba.org/archive/linux-cifs-client/2010-April/005757.html
- http://marc.info/?l=oss-security&m=127045754521927&w=2