CVE-2010-4242

Original summary

Normalized public record · Updated Nov 3, 2026

The hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service (NULL pointer dereference) via vectors related to the Bluetooth driver.

Publisher and source text is retained separately from QFinch interpretation.

Affected products

Matching a version is only one part of assessing exposure. QFinch has not assessed your environment on this public page.

Remediation

Apply the vendor-supported fixed release or mitigation, then verify the affected component is no longer reachable.

1. Confirm the affected product and reachable code path exist in your environment.
2. Apply the vendor-supported patch or mitigation from the primary advisory.
3. Rescan the exact deployed revision and retain verification evidence.

Evidence coverage

SSVC priority

LOW

Confidence

Not available

Aliases

None reported

Scores appear only when corresponding evidence exists. Missing data is never interpreted as zero risk.

Sources and record history

1. 42789 ↗
2. git.kernel.org ↗
3. ADV-2011-0024 ↗
4. RHSA-2011:0004 ↗
5. 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console ↗
6. 46397 ↗
7. kernel-hciuartttyopen-dos(64617) ↗
8. RHSA-2011:0007 ↗
9. 45014 ↗
10. 42963 ↗
11. bugzilla.redhat.com ↗
12. Security advisory ↗

Record history

Published Jan 11, 2011 · Last refreshed Nov 3, 2026