AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-3301

HIGH · CVSS 7.2 EPSS 3.82%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-09-22 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.2. It affects Linux.

CVE
CVE-2010-3301
Severity
HIGH
CVSS
7.2
EPSS
3.82%
Linux

Original NVD Description

The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-bounds access to the system call table using the %rax register. NOTE: this vulnerability exists because of a CVE-2007-4573 regression.