CVE-2010-5332: Linux Kernel

Medium severity, CVSS 5.6. EPSS: 0.4% chance of exploitation in the next 30 days.

In the Linux kernel before 2.6.37, an out of bounds array access happened in drivers/net/mlx4/port.c. When searching for a free entry in either mlx4_register_vlan() or mlx4_register_mac(), and there is no free entry, the loop terminates without updating the local variable free thus causing out of array bounds access.

Affected products

• Linux Linux Kernel: before 2.6.37 (fixed in 2.6.37)

Published 2019-07-27. Last modified 2026-06-16.