CVE-2010-3442

Multiple integer overflows in the snd_ctl_new function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) SNDRV_CTL_IOCTL_ELEM_ADD or (2) SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl call.

• CWE-190

• http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=5591bf07225523600450edd9e6ad258bb877b779
• http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/42400Third Party Advisory
• http://secunia.com/advisories/42745Third Party Advisory
• http://secunia.com/advisories/42778Third Party Advisory
• http://secunia.com/advisories/42789Third Party Advisory
• http://secunia.com/advisories/42801Third Party Advisory
• http://secunia.com/advisories/43291Third Party Advisory
• http://secunia.com/advisories/46397Third Party Advisory
• http://www.debian.org/security/2010/dsa-2126Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc5-next-20100928.bz2Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:257Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/09/29/2Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/09/29/3Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/09/29/4Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/09/29/9Mailing List, Patch, Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0842.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0936.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0958.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0004.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/520102/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/43787Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1000-1Third Party Advisory
• http://www.vmware.com/security/advisories/VMSA-2011-0012.htmlThird Party Advisory
• http://www.vupen.com/english/advisories/2010/3113Third Party Advisory
• http://www.vupen.com/english/advisories/2010/3321Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0012Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0024Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0298Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0375Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=638478Issue Tracking, Patch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=5591bf07225523600450edd9e6ad258bb877b779
• http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/42400Third Party Advisory
• http://secunia.com/advisories/42745Third Party Advisory
• http://secunia.com/advisories/42778Third Party Advisory
• http://secunia.com/advisories/42789Third Party Advisory
• http://secunia.com/advisories/42801Third Party Advisory
• http://secunia.com/advisories/43291Third Party Advisory
• http://secunia.com/advisories/46397Third Party Advisory
• http://www.debian.org/security/2010/dsa-2126Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc5-next-20100928.bz2Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:257Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/09/29/2Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/09/29/3Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/09/29/4Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/09/29/9Mailing List, Patch, Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0842.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0936.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0958.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0004.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/520102/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/43787Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1000-1Third Party Advisory
• http://www.vmware.com/security/advisories/VMSA-2011-0012.htmlThird Party Advisory
• http://www.vupen.com/english/advisories/2010/3113Third Party Advisory
• http://www.vupen.com/english/advisories/2010/3321Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0012Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0024Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0298Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0375Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=638478Issue Tracking, Patch, Third Party Advisory

Published

Oct 4, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3436fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remo…
• CVE-2010-3437Integer signedness error in the pkt_find_dev_from_minor func…
• CVE-2010-3438libpoe-component-irc-perl before v6.32 does not remove carri…9.8
• CVE-2010-3439It is possible to cause a DoS condition by causing the serve…6.5
• CVE-2010-3440babiloo 2.0.9 before 2.0.11 creates temporary files with pre…5.5
• CVE-2010-3441Multiple buffer overflows in abcm2ps before 5.9.12 might all…
• CVE-2010-3443ctcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7…
• CVE-2010-3444Buffer overflow in the log2vis_utf8 function in pyfribidi.c …
• CVE-2010-3445Stack consumption vulnerability in the dissect_ber_unknown f…
• CVE-2010-3446Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-3447Cross-site scripting (XSS) vulnerability in view.php in the …
• CVE-2010-3448drivers/platform/x86/thinkpad_acpi.c in the Linux kernel bef…