CVE-2010-4343: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to cause a denial of service (system crash) via read operations on an fc_host statistics file.

Affected products

• Linux Linux Kernel: before 2.6.35 (fixed in 2.6.35)
• VMware Esx: version 4.0 only; version 4.1 only

Published 2010-12-29. Last modified 2026-06-16.