CVE-2010-0003: Debian Linux

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address.

Affected products

• Debian Debian Linux: version 4.0 only; version 5.0 only
• Linux Linux Kernel: before 2.6.32.4 (fixed in 2.6.32.4)

Published 2010-01-26. Last modified 2026-06-16.