CVE-2010-4242

Published Jan 11, 2011 linux

Overview

CVE-2010-4242 is a known-severity vulnerability affecting linux linux_kernel. It was published on January 11, 2011.

Technical Description

The hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service (NULL pointer dereference) via vectors related to the Bluetooth driver.

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status

References

Ref git.kernel.org/linus/c19483cc5e56ac5e22dd19cf25ba210ab1537773 Ref lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html Ref secunia.com/advisories/42789 Ref secunia.com/advisories/42890 Ref secunia.com/advisories/42963 Ref secunia.com/advisories/43291 Ref secunia.com/advisories/46397 Ref www.redhat.com/support/errata/RHSA-2011-0004.html Ref www.redhat.com/support/errata/RHSA-2011-0007.html Ref www.redhat.com/support/errata/RHSA-2011-0162.html

Frequently Asked Questions

What is CVE-2010-4242?

CVE-2010-4242 is a known-severity vulnerability affecting linux linux_kernel. It was published on January 11, 2011.

How severe is CVE-2010-4242?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2010-4242?

How can CyberStrike help with CVE-2010-4242?

CyberStrike's AI-powered security agents can automatically detect CVE-2010-4242 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.