CVE-2010-1148

The cifs_create function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a NULL nameidata (aka nd) field in a POSIX file-creation request to a server that supports UNIX extensions.

• CWE-476

• http://lists.samba.org/archive/linux-cifs-client/2010-April/005741.htmlMailing List, Patch, Third Party Advisory
• http://lists.samba.org/archive/linux-cifs-client/2010-April/005742.htmlMailing List, Patch, Third Party Advisory
• http://lists.samba.org/archive/linux-cifs-client/2010-April/005746.htmlMailing List, Patch, Third Party Advisory
• http://lists.samba.org/archive/linux-cifs-client/2010-April/005757.htmlMailing List, Patch, Third Party Advisory
• http://marc.info/?l=oss-security&m=127045754521927&w=2Mailing List, Third Party Advisory
• http://marc.info/?l=oss-security&m=127045779122119&w=2Mailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2010/04/06/2Mailing List, Third Party Advisory
• http://secunia.com/advisories/39344Broken Link
• http://www.securityfocus.com/bid/39186Third Party Advisory, VDB Entry
• http://xorl.wordpress.com/2010/04/05/linux-kernel-unix-extensions-cifs-null-pointer-dereference/Exploit, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=579445Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57561Third Party Advisory, VDB Entry
• http://lists.samba.org/archive/linux-cifs-client/2010-April/005741.htmlMailing List, Patch, Third Party Advisory
• http://lists.samba.org/archive/linux-cifs-client/2010-April/005742.htmlMailing List, Patch, Third Party Advisory
• http://lists.samba.org/archive/linux-cifs-client/2010-April/005746.htmlMailing List, Patch, Third Party Advisory
• http://lists.samba.org/archive/linux-cifs-client/2010-April/005757.htmlMailing List, Patch, Third Party Advisory
• http://marc.info/?l=oss-security&m=127045754521927&w=2Mailing List, Third Party Advisory
• http://marc.info/?l=oss-security&m=127045779122119&w=2Mailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2010/04/06/2Mailing List, Third Party Advisory
• http://secunia.com/advisories/39344Broken Link
• http://www.securityfocus.com/bid/39186Third Party Advisory, VDB Entry
• http://xorl.wordpress.com/2010/04/05/linux-kernel-unix-extensions-cifs-null-pointer-dereference/Exploit, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=579445Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57561Third Party Advisory, VDB Entry

Published

Apr 12, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1142VMware Tools in VMware Workstation 6.5.x before 6.5.4 build …
• CVE-2010-1143Cross-site scripting (XSS) vulnerability in VMware View (for…
• CVE-2010-1144Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2010-1145Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2010-1146The Linux kernel 2.6.33.2 and earlier, when a ReiserFS files…
• CVE-2010-1147Stack-based buffer overflow in Open Direct Connect Hub (aka …
• CVE-2010-1149probers/udisks-dm-export.c in udisks before 1.0.1 exports UD…
• CVE-2010-1150MediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does …
• CVE-2010-1151Race condition in the mod_auth_shadow module for the Apache …
• CVE-2010-1152memcached.c in memcached before 1.4.3 allows remote attacker…
• CVE-2010-1153PHP remote file inclusion vulnerability in the autoloader in…
• CVE-2010-1154Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…