CVE-2010-4258

CVE-2010-4258 is a local privilege escalation vulnerability in the Linux kernel, specifically affecting versions before 2.6.36.2, including Fedora, openSUSE, and SUSE distributions. It stems from improper handling of KERNEL_DS get_fs values in the do_exit function, allowing local users to bypass access_ok restrictions. This flaw enables attackers to overwrite arbitrary kernel memory and gain root privileges through various triggers like BUGs, NULL pointer dereferences, or page faults, often leveraging clear_child_tid and splice system calls. The vulnerability has a CVSS score of 6.2 (Medium), indicating a local attack vector with high attack complexity but critical impact on confidentiality, integrity, and availability. Its EPSS score is low, suggesting it's not widely exploited in the wild, yet its FAUCET Risk Score is high at 86/100. While not listed in KEV or having Metasploit/Nuclei modules, an exploit (EDB-15704, "Full-Nelson.c") exists for Linux Kernel 2.6.37 (RedHat / Ubuntu 10.04). Community discussion and media coverage are minimal, suggesting limited public attention despite the availability of exploit code.