Search/CVE-2010-2492
● CVE — High

CVE-2010-2492

Vendorlinux, avaya, vmwareProductlinux kernel, aura communication manager, aura session manager, aura system manager, iq, esx, aura system platform, aura presence services, aura voice portalDiscoveredSep 8, 2010UpdatedApr 29, 2026

Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of service (system crash) via unspecified vectors.

CVSS v3.1
7.8 HIGH
EPSS
0.43%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
disclosure → media coverage
Sep 8, 2010
Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026