The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial…
Priority LOW 22CWE-264Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.
Summary
The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling the (1) mmap or (2) mremap function, aka the "do_mremap() mess" or "mremap/mmap mess."
Why it matters now
EPSS 0.0043 37th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
Remediation
Red Hat 2 advisories
- RHSA-2010:0504 Released 2010-07-01 · Red Hat rating Importantkernel security and bug fix update
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-194.8.1.el5, kernel-2.6.18-194.8.1.el5.ia64, kernel-PAE-2.6.18-194.8.1.el5 +14
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-194.8.1.el5, kernel-PAE-2.6.18-194.8.1.el5, kernel-PAE-devel-2.6.18-194.8.1.el5 +6
- RHSA-2010:0161 Released 2010-03-23 · Red Hat rating Importantkernel-rt security and bug fix update
- MRG Realtime for RHEL 5 Server kernel-rt-2.6.24.7-149.el5rt, kernel-rt-debug-2.6.24.7-149.el5rt, kernel-rt-debug-devel-2.6.24.7-149.el5rt +6
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| MRG Realtime for RHEL 5 Server | Fixed | RHSA-2010:0161 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2010:0504 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2010:0504 |
Timeline
- 2026-10-02 Threatist record created from CVE-2010-0291
- 2026-10-03 Alias added: GHSA-p733-g2pv-9gp7
References
Advisory 17
- http://groups.google.co.jp/group/fa.linux.kernel/browse_thread/thread/8bf22336b1082090
- [oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess
- [oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess
- oval:org.mitre.oval:def:11824
- [linux-kernel] 20100114 [PATCH 01/52] untangle the do_mremap() mess
- [oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess
- [linux-kernel] 20091205 [RFC][PATCHSET] mremap/mmap mess
- [oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess
- [oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess
- [oss-security] 20100121 Re: CVE request - kernel: untangle the do_mremap() mess
- DSA-1996
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- [oss-security] 20100119 CVE request - kernel: untangle the do_mremap() mess
- DSA-2005
- [oss-security] 20100119 Re: CVE request - kernel: untangle the do_mremap() mess
- https://bugzilla.redhat.com/show_bug.cgi?id=556703
- RHSA-2010:0161
Other 20
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ecc1a8993751de4e82eb18640d631dae1f626bd6
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0ec62d290912bb4b989be7563851bc364ec73b56
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=05d72faa6d13c9d857478a5d35c85db9adada685
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=54f5de709984bae0d31d823ff03de755f9dcac54
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e77414e0aad6a1b063ba5e5750c582c75327ea6a
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f106af4e90eadd76cfc0b5325f659619e08fb762
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ea1d13f64efdf49319e86c87d9ba38c30902782
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aa65607373a4daf2010e8c3867b6317619f3c1a3
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2c6a10161d0b5fc047b5bd81b03693b9af99fab5
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=564b3bffc619dcbdd160de597b0547a7017ea010
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0067bd8a55862ac9dd212bd1c4f6f5bff1ca1301
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bb52d6694002b9d632bb355f64daa045c6293a4e
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=570dcf2c15463842e384eb597a87c1e39bead99b
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9206de95b1ea68357996ec02be5db0638a0de2c1
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=935874141df839c706cd6cdc438e85eb69d1525e
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=097eed103862f9c6a97f2e415e21d1134017b135
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c4caa778157dbbf04116f0ac2111e389b5cd7a29
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1a0ef85f84feb13f07b604fcf5b90ef7c2b5c82f
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f8b7256096a20436f6d0926747e3ac3d64c81d24
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c7b49b3ecd48923eb64ff57e07a1cdb74782970
Sources
- CVE-2010-0291 · CVE Program
- CVE-2010-0291 · NVD
- FIRST EPSS
- GHSA-p733-g2pv-9gp7 · GitHub Advisory Database · CC BY 4.0
- CVE-2010-0291 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences