CVE-2010-4165

CVE-2010-4165 is a denial-of-service vulnerability affecting the Linux kernel before version 2.6.37-rc2, including OpenSUSE and SUSE distributions. A local attacker can trigger a kernel OOPS by providing a specially crafted, small TCP_MAXSEG (MSS) value via a setsockopt call, leading to a divide-by-zero error or incorrect signed integer usage. The CVSS score of 4.9 indicates a low-severity local attack with low complexity, resulting in a complete system availability impact. While not listed on the KEV catalog or Hot List, two ExploitDB entries confirm the existence of proof-of-concept code, though there is no evidence of active exploitation or significant community discussion.