CVE-2010-4157: Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on...

Security readout for executives and security teams

This is an old Linux kernel flaw in the gdth SCSI driver. On 64-bit systems, a local user could trigger memory corruption through a crafted ioctl argument, causing denial of service and possibly other unspecified impact. The main business concern is legacy, unpatched Linux infrastructure with local user access. Exposure is most likely on legacy 64-bit Linux systems running vulnerable kernels before 2.6.36.1, especially where the gdth SCSI driver is present and local users can issue relevant ioctl calls. Current systems are less likely exposed unless they retain unpatched vendor kernels or old virtualization/service-console environments. Treat this as a legacy Linux hygiene issue, not a current internet-facing emergency based on the supplied evidence. Prioritize if old 64-bit Linux systems still support multi-user access, virtualization service consoles, or unsupported kernel packages. Mitigation focus: Upgrade to a vendor kernel package that includes the gdth ioctl integer overflow fix.; Consult Red Hat, SUSE, Fedora, or VMware advisories if using their legacy kernels.; Prioritize systems where untrusted local users can access vulnerable kernels..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.