CVE-2010-4170: Systemtap

High severity, CVSS 7.2. EPSS: 5.8% chance of exploitation in the next 30 days.

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

Affected products

• Systemtap Systemtap: version 1.3 only

Published 2010-12-07. Last modified 2026-06-16.