CVE-2010-3080

CVE-2010-3080 is a high-severity vulnerability in Linux Linux Kernel with a CVSS 2.0 base score of 7.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-415.

Key facts

• Severity: High (CVSS 2.0 base score 7.2)
• EPSS exploit prediction: 0% (33rd percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-415
• Affected product: Linux Linux Kernel
• Published: 2010-09-21
• Last modified: 2026-06-16

Description

Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c in the Linux kernel before 2.6.36-rc4 might allow local users to cause a denial of service or possibly have unspecified other impact via an unsuccessful attempt to open the /dev/sequencer device.

Frequently asked questions

What is CVE-2010-3080?

Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c in the Linux kernel before 2.6.36-rc4 might allow local users to cause a denial of service or possibly have unspecified other impact via an unsuccessful attempt to open the /dev/sequencer device.

How severe is CVE-2010-3080?

CVE-2010-3080 has a CVSS 2.0 base score of 7.2, rated high severity.

Is CVE-2010-3080 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (33rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2010-3080?

CVE-2010-3080 primarily affects Linux Linux Kernel. In total, 15 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2010-3080?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2010-3080 published?

CVE-2010-3080 was published on 2010-09-21 and last updated on 2026-06-16.

References

• http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=c598337660c21c0afaa9df5a65bb4a7a0cf15be8
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27f7ad53829f79e799a253285318bff79ece15bd
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html
• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
• http://secunia.com/advisories/42890
• http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
• http://www.openwall.com/lists/oss-security/2010/09/08/7
• http://www.redhat.com/support/errata/RHSA-2011-0007.html
• http://www.securityfocus.com/bid/43062
• http://www.ubuntu.com/usn/USN-1000-1
• http://www.vupen.com/english/advisories/2011/0298
• https://bugzilla.redhat.com/show_bug.cgi?id=630551

Affected products (15)

• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
• cpe:2.3:o:linux:linux_kernel:2.6.36:-:*:*:*:*:*:*
• cpe:2.3:o:linux:linux_kernel:2.6.36:rc1:*:*:*:*:*:*
• cpe:2.3:o:linux:linux_kernel:2.6.36:rc2:*:*:*:*:*:*
• cpe:2.3:o:linux:linux_kernel:2.6.36:rc3:*:*:*:*:*:*
• cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*
• cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp1:*:*:*:*:*:*
• cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

More vulnerabilities in Linux Linux Kernel

• CVE-2023-2163 — Critical (CVSS 10.0): Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe,…
• CVE-2015-8104 — Critical (CVSS 10.0): The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a…
• CVE-2015-1421 — Critical (CVSS 10.0): Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before…
• CVE-2014-2523 — Critical (CVSS 10.0): net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly,…
• CVE-2010-2495 — Critical (CVSS 10.0): The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does…
• CVE-2010-2521 — Critical (CVSS 10.0): Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before…

All CVEs affecting Linux Linux Kernel →

Other CWE-415 (Double Free) vulnerabilities

• CVE-2018-0101 — Critical (CVSS 10.0): A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA)…
• CVE-2026-8925 — Critical (CVSS 9.8): The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing…
• CVE-2020-37239 — Critical (CVSS 9.8): libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety…
• CVE-2026-43011 — Critical (CVSS 9.8): In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When…
• CVE-2026-31609 — Critical (CVSS 9.8): In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid double-free in…
• CVE-2026-31608 — Critical (CVSS 9.8): In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in…

Browse all CWE-415 (Double Free) vulnerabilities →