vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2010-4526

N/A
Published: January 11, 2011 at 01:00 AM UTC
Updated: June 16, 2026 at 11:24 PM UTC
3 products affected across 3 vendorsLinux KernelESXEnterprise Mrg

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 3%

Description

Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctp_wait_for_connect function.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

References (12)

x_refsource_CONFIRM
Source: [email protected]
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=50b5d6ad63821cea324a5a7a19854d4de1a0a819
Third Party Advisoryx_refsource_SECUNIABroken Link
Source: [email protected]
http://secunia.com/advisories/42964
Third Party Advisoryx_refsource_SECUNIABroken Link
Source: [email protected]
http://secunia.com/advisories/46397
Mailing Listx_refsource_MLISTPatchThird Party Advisory
Source: [email protected]
http://www.openwall.com/lists/oss-security/2011/01/04/13
Mailing Listx_refsource_MLISTPatchThird Party Advisory
Source: [email protected]
http://www.openwall.com/lists/oss-security/2011/01/04/3
Vendor Advisoryx_refsource_REDHATBroken Link
Source: [email protected]
http://www.redhat.com/support/errata/RHSA-2011-0163.html
Mailing Listx_refsource_BUGTRAQThird Party AdvisoryVDB Entry
Source: [email protected]
http://www.securityfocus.com/archive/1/520102/100/0/threaded
VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/45661

CVSS

7.1HIGH[email protected]
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-362

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card