CVE-2010-2243

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current_clocksource results in an OOPS.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
linux-2.6	linux-2.6	before 2.6.33

References

https://access.redhat.com/security/cve/cve-2010-2243Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad6759fbf35d104dbf573cd6f4c6784ad6823f7eMailing List, Patch, Vendor Advisory
https://security-tracker.debian.org/tracker/CVE-2010-2243Third Party Advisory
https://www.openwall.com/lists/oss-security/2010/06/25/1Mailing List, Patch, Third Party Advisory
https://access.redhat.com/security/cve/cve-2010-2243Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad6759fbf35d104dbf573cd6f4c6784ad6823f7eMailing List, Patch, Vendor Advisory
https://security-tracker.debian.org/tracker/CVE-2010-2243Third Party Advisory
https://www.openwall.com/lists/oss-security/2010/06/25/1Mailing List, Patch, Third Party Advisory

Timeline

Published: Nov 7, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-22444.3The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of s CVE-2010-22457.4XML External Entity (XXE) vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial o CVE-2010-22465.1feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharac CVE-2010-22477.5makepasswd 1.10 default settings generate insecure passwords CVE-2010-22487.8fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (pan CVE-2010-22496.5Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory cons CVE-2010-22506.1Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL an CVE-2010-22517.5The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the dest CVE-2010-22526.8GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, w CVE-2010-22536.8lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, which allows remote ser CVE-2010-22547.5SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via CVE-2010-22557.5SQL injection vulnerability in the BF Survey Pro (com_bfsurvey_pro) component before 1.3.1, BF Survey Pro Free (com_bfsurvey_profree) compon