CVE-2010-4527

CVE-2010-4527 is a buffer overflow vulnerability in the Linux kernel's OSS sound subsystem, specifically affecting the load_mixer_volumes function in sound/oss/soundcard.c. This flaw arises from an incorrect expectation that a name field is null-terminated, impacting Linux kernel versions prior to 2.6.37. With a CVSS score of 6.9, this vulnerability allows local attackers to achieve privilege escalation, or potentially disclose sensitive kernel memory, through a crafted SOUND_MIXER_SETLEVELS ioctl call, requiring medium attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.