CVE-2010-3067: Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-201009...

Security readout for executives and security teams

CVE-2010-3067 is a Linux kernel flaw in asynchronous I/O handling. A local user could trigger an integer overflow through the io_submit system call, causing denial of service and possibly other unspecified effects. It matters mainly where untrusted users or workloads can run code on older kernels. Exposure is most likely on legacy Linux systems or vendor appliances using affected kernels from the 2010-2011 advisory period, especially multi-user hosts, shared hosting, and virtualization/service-console environments. Treat this as a legacy exposure cleanup item unless affected multi-user or shared compute hosts remain. The business risk is service disruption from local users on unpatched kernels, with incomplete evidence on broader impact. Mitigation focus: Apply the relevant vendor kernel update for each affected system.; Confirm kernels include the fix at or after 2.6.36-rc4-next-20100915.; Prioritize multi-user and shared compute systems first..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.