CVE-2010-4347: The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method...

Security readout for executives and security teams

CVE-2010-4347 is an old Linux kernel local privilege escalation issue. On affected systems, a locally authenticated user could abuse an overly writable ACPI debugfs interface to gain higher privileges. The business risk is mainly legacy Linux hosts, appliances, or embedded systems still running vulnerable or unpatched kernels. Exposure is most likely on legacy Linux systems, vendor kernels without the relevant backport, or appliances using older 2.6-era kernels. The flaw requires local access and the vulnerable debugfs ACPI custom_method interface, so internet-only exposure is not indicated by the provided sources. Prioritize remediation for legacy Linux systems with shared local access, hosting platforms, or appliances. This is not documented as remotely exploitable, but it can turn a low-privilege local foothold into full system compromise on affected kernels. Mitigation focus: Apply vendor kernel updates that include the CVE-2010-4347 fix.; Upgrade kernels before 2.6.36.2 or confirm vendor backports.; Review whether debugfs is mounted on production systems..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.