CVE-2010-2478: Integer overflow in the ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33....

Security readout for executives and security teams

CVE-2010-2478 is an old Linux kernel flaw affecting 32-bit platforms before kernel 2.6.33.7. A local user could trigger a kernel buffer overflow through a malformed ethtool request, causing denial of service and possibly other unspecified impact. Exposure is most likely on legacy 32-bit Linux systems running kernels before 2.6.33.7, including distribution kernels covered by vendor advisories. Modern 64-bit systems or patched vendor kernels are not shown as affected by the provided sources. Treat this as a legacy kernel hygiene issue with moderate urgency. It is not shown as remotely exploitable or actively exploited, but affected multi-user 32-bit Linux hosts can be crashed and should be retired or patched. Mitigation focus: Identify 32-bit Linux hosts running kernels before 2.6.33.7.; Apply the relevant vendor kernel security update or an upstream fixed kernel.; Prioritize internet-facing or multi-user systems where local accounts exist..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.