CVEs-PoC/2010/CVE-2010-4346.md

CVE-2010-4346

Description

The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application.

POC

Reference

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=462e635e5b73ba9a4c03913b77138cd57ce4b050
• http://www.vmware.com/security/advisories/VMSA-2011-0012.html
• https://bugzilla.redhat.com/show_bug.cgi?id=662189

Github

No PoCs found on GitHub currently.