CVE-2010-4668

The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4163.

• CWE-400

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5478755616ae2ef1ce144dded589b62b2a50d575
• http://lkml.org/lkml/2010/11/29/68Mailing List, Patch, Third Party Advisory
• http://lkml.org/lkml/2010/11/29/70Mailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2010/11/29/1Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2010/11/30/4Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2010/11/30/7Mailing List, Patch, Third Party Advisory
• http://secunia.com/advisories/42890Third Party Advisory, Vendor Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc7Broken Link
• http://www.redhat.com/support/errata/RHSA-2011-0007.htmlThird Party Advisory
• http://www.securityfocus.com/bid/45660Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64496Third Party Advisory, VDB Entry
• https://patchwork.kernel.org/patch/363282/Patch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5478755616ae2ef1ce144dded589b62b2a50d575
• http://lkml.org/lkml/2010/11/29/68Mailing List, Patch, Third Party Advisory
• http://lkml.org/lkml/2010/11/29/70Mailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2010/11/29/1Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2010/11/30/4Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2010/11/30/7Mailing List, Patch, Third Party Advisory
• http://secunia.com/advisories/42890Third Party Advisory, Vendor Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc7Broken Link
• http://www.redhat.com/support/errata/RHSA-2011-0007.htmlThird Party Advisory
• http://www.securityfocus.com/bid/45660Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64496Third Party Advisory, VDB Entry
• https://patchwork.kernel.org/patch/363282/Patch, Third Party Advisory

Published

Jan 3, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4662PmWiki before 2.2.21 has XSS.6.1
• CVE-2010-4663Unspecified vulnerability in the News module in CMS Made Sim…
• CVE-2010-4664In ConsoleKit before 0.4.2, an intended security policy rest…8.8
• CVE-2010-4665Integer overflow in the ReadDirectory function in tiffdump.c…
• CVE-2010-4666Buffer overflow in libarchive 3.0 pre-release code allows re…
• CVE-2010-4667Cross-site scripting (XSS) vulnerability in Coppermine Photo…
• CVE-2010-4669The Neighbor Discovery (ND) protocol implementation in the I…
• CVE-2010-4670The Neighbor Discovery (ND) protocol implementation in the I…
• CVE-2010-4671The Neighbor Discovery (ND) protocol implementation in the I…
• CVE-2010-4672Cisco Adaptive Security Appliances (ASA) 5500 series devices…
• CVE-2010-4673Cisco Adaptive Security Appliances (ASA) 5500 series devices…
• CVE-2010-4674Unspecified vulnerability on Cisco Adaptive Security Applian…