CVE-2010-3301

CVE-2010-3301 describes a privilege escalation vulnerability in the Linux kernel affecting x86_64 systems running versions prior to 2.6.36-rc4-git2. Specifically, the IA32 system call emulation functionality fails to zero-extend the %eax register, allowing local users to gain privileges through an out-of-bounds access to the system call table. This vulnerability is a regression of CVE-2007-4573 and impacts various Linux distributions including Canonical, SUSE, and general Linux kernels. With a CVSS score of 7.2 (High), this vulnerability has a low attack complexity and requires local access, but allows for complete compromise of confidentiality, integrity, and availability. The FAUCET Risk Score is 90/100, indicating a significant risk. While not actively exploited in the wild and not listed in CISA's KEV catalog, exploit code (EDB-15023) is publicly available on ExploitDB. Despite the availability of exploit code, there is minimal community discussion or media coverage surrounding this CVE.