CVE-2010-4346: Linux Kernel

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application.

Affected products

• Linux Linux Kernel: before 2.6.37 (fixed in 2.6.37); version 2.6.37 only

Published 2010-12-22. Last modified 2026-06-16.