CVE-2010-3448: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

drivers/platform/x86/thinkpad_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not properly restrict access to the video output control state, which allows local users to cause a denial of service (system hang) via a (1) read or (2) write operation.

Affected products

• Linux Linux Kernel: before 2.6.34 (fixed in 2.6.34)

Published 2011-01-03. Last modified 2026-06-16.