CVE-2010-4250

MediumPublished

Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows local users to cause a denial of...

Published: Jun 21, 2012
Updated: Aug 7, 2024
Assigning CNA: redhat
Evidence observed: Nov 24, 2010

Primary CVSS

4.9/ 10Medium

nvd · CVSS 2.0

AV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS probability estimate

0.8%

Low · next 30 days

Percentile: 54.0%
Model date: Oct 13, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory consumption) via vectors involving failed attempts to create files.

Sources

Linux Kernel 2.6.x - 'inotify_init()' Memory Leak Local Denial of ServiceExploit
Vegard Nossum · linux · Nov 24, 2010

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.