CVE-2010-2959 is an integer overflow vulnerability in the Linux kernel's Controller Area Network (CAN) implementation (net/can/bcm.c) affecting versions before 2.6.27.53, 2.6.32.21, 2.6.34.6, and 2.6.35.4, impacting distributions like Debian, Fedora, openSUSE, and SUSE. With a CVSS score of 7.2, this vulnerability is considered highly severe, allowing attackers to execute arbitrary code or cause a denial of service via crafted CAN traffic, requiring local access but low attack complexity. While not listed on the KEV catalog or Hot List, and with no Metasploit or Nuclei modules, a local privilege escalation exploit (EDB-14814) exists, though there is minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.6.27.53CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 2.6.32, < 2.6.32.21CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 2.6.34, < 2.6.34.6CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 2.6.35, < 2.6.35.4CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
12CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.