CVE-2010-2524: The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_...

Security readout for executives and security teams

CVE-2010-2524 affects older Linux kernels using CIFS DFS upcalls. A local user may poison CIFS DNS resolution through the user keyring, causing the system to trust false lookup results and mount unintended CIFS paths. Business urgency depends on old kernel presence, CIFS use, DFS upcall enablement, and local user access. Exposure is most likely on legacy Linux systems running kernels before 2.6.35 or vendor-backported equivalents, where CIFS DFS support is enabled and local users can access the host. Current standard distributions are unlikely to be exposed unless running old or frozen kernels. Treat this as a legacy Linux hygiene issue with conditional exposure. Prioritize shared or multi-user servers that mount CIFS resources. It is not identified as actively exploited in the provided sources, but stale kernels and local-user access raise operational risk. Mitigation focus: Apply relevant vendor kernel updates from Red Hat, Ubuntu, SUSE, Mandriva, VMware, or equivalent guidance.; Upgrade away from Linux kernels before 2.6.35 unless vendor backports confirm the fix.; Inventory systems where CIFS, MS-DFS referrals, cifs.upcall, or dns_resolver upcalls are used..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.