CVE-2010-1086: Debian Linux

High severity, CVSS 7.8. EPSS: 3.6% chance of exploitation in the next 30 days.

The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.

Affected products

  • Debian Debian Linux: version 5.0 only
  • Linux Linux Kernel: up to and including 2.6.33

Published 2010-04-06. Last modified 2026-06-16.