CVE-2010-3874: Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the...

Security readout for executives and security teams

CVE-2010-3874 is an old Linux kernel flaw in the CAN Broadcast Manager. On affected 64-bit kernels, a local user may trigger memory corruption and crash or destabilize the system. This is mainly a local availability risk, not a remote internet-facing issue based on the provided sources. Exposure is likely limited to 64-bit Linux systems running kernels before 2.6.36.2 or unfixed vendor backports, where local users or workloads can reach CAN BCM functionality. The bundle does not identify affected distributions beyond advisory references. Treat this as a legacy kernel hygiene issue with local denial-of-service impact. Prioritize internet-critical, shared, or multi-user Linux hosts first, especially where old 64-bit kernels remain in production. Mitigation focus: Prioritize vendor-supported kernel updates for systems matching the affected kernel range.; Check SUSE, Fedora, Red Hat, or relevant vendor advisories for fixed package guidance.; Reduce unnecessary local user access on affected hosts until patched..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.