CVE-2010-4163: Linux Kernel

Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days.

The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device.

Affected products

• Linux Linux Kernel: before 2.6.36.2 (fixed in 2.6.36.2)
• Opensuse Opensuse: version 11.2 only; version 11.3 only
• Suse Linux Enterprise Desktop: version 11 only
• Suse Linux Enterprise Real Time Extension: version 11 only
• Suse Linux Enterprise Server: version 11 only

Published 2011-01-03. Last modified 2026-06-16.