CVE-2010-1148: The cifs_create function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local users to ca...

Security readout for executives and security teams

CVE-2010-1148 is a local Linux kernel CIFS client flaw. A user on an affected machine could trigger a kernel crash when creating a file over a CIFS/SMB connection to a server with UNIX extensions. The clearest supported impact is denial of service; sources only mention possible unspecified other impact. Exposure is likely limited to very old Linux systems using the CIFS client with mounts to servers that support UNIX extensions, where local users can perform file creation operations. Modern supported kernels are unlikely to be affected, but source evidence does not list all vendor package statuses. Treat this as a legacy Linux stability risk, not a current internet-scale emergency. Prioritize systems where untrusted local users share old Linux hosts using CIFS mounts, especially production servers where a kernel crash would disrupt business operations. Mitigation focus: Upgrade affected Linux kernels using vendor-supported packages or advisories.; Apply a kernel fix that handles NULL nameidata in cifs_create.; Review vendor guidance for distribution-specific backports and affected package versions..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.