CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: the compat_alloc_user_space functions in include/asm/compat.h files in the linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the mcast_msfilter getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in september 2010.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2010-09-24
Last Modified Date: 2018-10-10