CVE-2010-4347

CVE-2010-4347 describes a local privilege escalation vulnerability in the ACPI subsystem of the Linux kernel versions prior to 2.6.36.2. This flaw allows local users to gain elevated privileges by manipulating the debugfs custom_method file, which was incorrectly configured with overly permissive 0222 permissions. Affected products include various Linux distributions such as OpenSUSE and SUSE Linux Enterprise. The vulnerability has a CVSS score of 6.9, indicating high severity with a local attack vector and medium attack complexity. Successful exploitation could lead to complete compromise of confidentiality, integrity, and availability. The EPSS score is low, suggesting a low probability of exploitation in the wild. While not listed on the CISA KEV catalog or Hot List, an exploit for this vulnerability is publicly available on ExploitDB (EDB-15774). There is no evidence of active exploitation, and the CVE has received minimal community discussion or media coverage.