CVE-2010-2240

CVE-2010-2240 is a critical vulnerability in the Linux kernel, specifically affecting versions before 2.6.27.52, 2.6.32.19, 2.6.34.4, and 2.6.35.2. It stems from improper separation of the stack and heap in the do_anonymous_page function, allowing local attackers to execute arbitrary code. The vulnerability carries a CVSS score of 7.2, indicating high severity due to its local attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered significant community discussion and media coverage, including articles related to "Stack Clash" flaws, suggesting awareness among security researchers.