Skip to main content

NULL Pointer Dereference

CVE-2010-3849

Medium
4.7/10

Summary

The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field.

  • MEDIUM
  • LOCAL
  • NONE
  • NONE
  • NONE
  • COMPLETE

CWE-476 - NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

Advisory Timeline

  • Published