CVE-2010-3874: Debian Linux

Medium severity, CVSS 4.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service (memory corruption) via a connect operation.

Affected products

• Debian Debian Linux: version 5.0 only
• Fedoraproject Fedora: version 13 only
• Linux Linux Kernel: before 2.6.36.2 (fixed in 2.6.36.2)
• Opensuse Opensuse: version 11.2 only; version 11.3 only
• Suse Linux Enterprise Desktop: version 11 only
• Suse Linux Enterprise Real Time Extension: version 11 only
• Suse Linux Enterprise Server: version 11 only

Published 2010-12-29. Last modified 2026-06-16.