The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly obtain the value of a certain _PAGE_EXEC_4U bit and consequently does not properly implement a non-executable stack, which makes it easier for context-dependent attackers to exploit stack-based buffer overflows via a crafted application.
CVE-2010-1451
This CVE was only ever scored under CVSS v2.0. NVD CVSS v2.0 base 2.1 — v2 rates that LOW (v2 bands: LOW 0.0–3.9 / MEDIUM 4.0–6.9 / HIGH 7.0–10.0; v2 has no CRITICAL band). Vector AV:L/AC:L/Au:N/C:N/I:P/A:N. CVSS v2 is an older, coarser metric than v3.1/v4.0 (no Scope, no User Interaction, no Attack Requirements), so it is not directly comparable to a v3 or v4 score. NVD has never re-scored this record under v3. EPSS predicts 0.5% exploitation probability in the next 30 days, which is reflected in EG Risk but does not lift the v2 base. Confidence: LOW.
- Lower severity and no public exploit yet
A fix is available — apply it.
- CVSS v2.0 (legacy)
- 2.1LOWNVD never assigned a CVSS v3 rating to this CVE
- EG Score
- 2.1(low)
- EG Risk
- 14(Track)EG Risk 14/100SSVC: Track
EG Risk is EchelonGraph's 0–100 priority score: it fuses intrinsic severity with real-world exploitation and automatability so you can rank equal-severity CVEs and fix the most dangerous first. Higher = act sooner. Distinct from the 0–10 EG Score (severity).
How it’s computedSeverity21% × 45%Exploitation1% × 40%Automatability30% × 15%Action: Routine — remediate on your standard cadence. - EPSS PROB
- 1%
- EPSS %ILE
- 43%
- KEV
- Not listed
Published
May 7, 2010
Last Modified
April 29, 2026
References (14)
- secalert@redhathttp://marc.info/?l=linux-sparc&m=126662159602378&w=2
- secalert@redhathttp://marc.info/?l=linux-sparc&m=126662196902830&w=2
- secalert@redhathttp://secunia.com/advisories/39830
- secalert@redhathttp://www.debian.org/security/2010/dsa-2053
- secalert@redhathttp://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33
- secalert@redhathttp://www.openwall.com/lists/oss-security/2010/02/24/1
- secalert@redhathttp://www.openwall.com/lists/oss-security/2010/05/05/2
- af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=linux-sparc&m=126662159602378&w=2
- af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=linux-sparc&m=126662196902830&w=2
- af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/39830
- af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2010/dsa-2053
- af854a3a-2127-422b-91ae-364da2661108http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33
- af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2010/02/24/1
- af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2010/05/05/2
Patch Availability(1)
| Vendor / Ecosystem | Fixed in / Patch | Released | Source |
|---|---|---|---|
| ubuntu | linux-image-2.6.32-24-lpia (2.6.32-24.39) @ lucid | 2026-05-29 | ubuntu |
Patches are aggregated from vendor advisories (Red Hat, Microsoft, Cisco, GitHub) and package ecosystems (OSV, GHSA). Multiple rows for the same upstream release have been deduplicated.
Affected Packages
(1 across 1 ecosystem)
Debian:5.0(1)
| Package | Vulnerable range | Fixed in | Dependents |
|---|---|---|---|
| linux-2.6 | 2.6.26-13 ... 2.6.26-22 (30 versions) | 2.6.26-22lenny1 | — |
Weakness Classification(1)
MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.
All Vendor Advisories
(1)
Every vendor that published an advisory referencing this CVE — pulled from our cve_vendor_advisories aggregation. Click any row for the vendor's original advisory page.
Data Freshness Timeline
(refreshed 4× in last 7d / 12× in last 30d)
Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.
Showing the most recent 100 of 127 total refreshes for this CVE.
- 2026-09-16 13:58 UTCEPSS rescore
- 2026-09-15 03:04 UTCEPSS rescore
- 2026-09-13 16:40 UTCEPSS rescore
- 2026-09-12 14:54 UTCEPSS rescore
- 2026-09-10 09:24 UTCEPSS rescore
- 2026-09-07 15:55 UTCEPSS rescore
- 2026-09-06 13:41 UTCEPSS rescore
- 2026-09-05 15:22 UTCEPSS rescore
- 2026-09-04 13:55 UTCEPSS rescore
- 2026-08-28 21:34 UTCEPSS rescore
- 2026-08-26 14:40 UTCEPSS rescore
- 2026-08-25 13:43 UTCEPSS rescore
- 2026-08-19 16:58 UTCEPSS rescore
- 2026-08-18 13:42 UTCEPSS rescore
- 2026-08-16 02:09 UTCEPSS rescore
- 2026-08-15 01:25 UTCEPSS rescore
- 2026-08-09 13:41 UTCEPSS rescore
- 2026-08-07 16:21 UTCEPSS rescore
- 2026-08-06 13:41 UTCEPSS rescore
- 2026-08-05 19:11 UTCEPSS rescore
- 2026-08-04 15:04 UTCEPSS rescore
- 2026-08-01 04:10 UTCEPSS rescore
- 2026-07-30 01:26 UTCEPSS rescore
- 2026-07-26 13:40 UTCEG score recompute▲ 2.10
- 2026-07-25 14:12 UTCEPSS rescore
Show 75 moreShow fewer
- 2026-07-23 14:14 UTCEPSS rescore
- 2026-07-23 01:01 UTCEG score recompute
- 2026-07-23 00:38 UTCEG score recompute
- 2026-07-23 00:05 UTCEG score recompute
- 2026-07-22 21:44 UTCEG score recompute
- 2026-07-22 14:03 UTCEPSS rescore
- 2026-07-22 14:03 UTCEPSS rescore
- 2026-07-21 15:20 UTCEPSS rescore
- 2026-07-20 17:03 UTCEPSS rescore
- 2026-07-19 02:25 UTCEPSS rescore
- 2026-07-18 10:00 UTCEPSS rescore
- 2026-07-16 16:58 UTCEPSS rescore
- 2026-07-15 16:54 UTCEPSS rescore
- 2026-07-15 16:54 UTCEPSS rescore
- 2026-07-15 01:55 UTCEPSS rescore
- 2026-07-13 22:25 UTCEPSS rescore
- 2026-07-13 06:08 UTCEPSS rescore
- 2026-07-11 08:22 UTCEPSS rescore
- 2026-07-08 15:10 UTCEPSS rescore
- 2026-07-08 15:10 UTCEPSS rescore
- 2026-07-06 02:19 UTCEPSS rescore
- 2026-07-06 02:19 UTCEPSS rescore
- 2026-07-05 02:26 UTCEPSS rescore
- 2026-07-02 14:01 UTCEPSS rescore
- 2026-07-01 15:02 UTCEPSS rescore
- 2026-06-30 23:19 UTCEPSS rescore
- 2026-06-29 14:02 UTCEPSS rescore
- 2026-06-29 14:02 UTCEPSS rescore
- 2026-06-28 14:03 UTCEPSS rescore
- 2026-06-28 04:52 UTCEPSS rescore
- 2026-06-28 04:52 UTCEPSS rescore
- 2026-06-27 03:05 UTCEPSS rescore
- 2026-06-25 13:46 UTCEPSS rescore
- 2026-06-24 14:02 UTCEPSS rescore
- 2026-06-24 14:02 UTCEPSS rescore
- 2026-06-23 21:30 UTCEPSS rescore
- 2026-06-23 21:29 UTCEPSS rescore
- 2026-06-22 14:22 UTCEPSS rescore
- 2026-06-22 14:22 UTCEPSS rescore
- 2026-06-21 14:53 UTCEPSS rescore
- 2026-06-21 01:56 UTCEPSS rescore
- 2026-06-21 01:56 UTCEPSS rescore
- 2026-06-19 19:22 UTCEPSS rescore
- 2026-06-19 19:22 UTCEPSS rescore
- 2026-06-18 17:49 UTCEPSS rescore
- 2026-06-18 17:49 UTCEPSS rescore
- 2026-06-17 17:49 UTCEPSS rescore
- 2026-06-17 17:49 UTCEPSS rescore
- 2026-06-16 17:49 UTCEPSS rescore
- 2026-06-15 17:44 UTCEPSS rescore
- 2026-06-14 23:14 UTCEPSS rescore
- 2026-06-13 22:57 UTCEPSS rescore
- 2026-06-13 22:57 UTCEPSS rescore
- 2026-06-13 22:57 UTCEPSS rescore
- 2026-06-12 23:08 UTCEPSS rescore
- 2026-06-12 23:08 UTCEPSS rescore
- 2026-06-11 13:56 UTCEPSS rescore
- 2026-06-10 22:14 UTCEPSS rescore
- 2026-06-10 13:17 UTCEPSS rescore
- 2026-06-08 14:13 UTCEPSS rescore
- 2026-06-07 15:22 UTCEPSS rescore
- 2026-06-07 15:22 UTCEPSS rescore
- 2026-06-06 13:44 UTCEPSS rescore
- 2026-06-06 13:44 UTCEPSS rescore
- 2026-06-05 22:44 UTCEPSS rescore
- 2026-06-05 22:44 UTCEPSS rescore
- 2026-06-05 06:07 UTCEPSS rescore
- 2026-06-05 06:07 UTCEPSS rescore
- 2026-06-04 13:09 UTCEPSS rescore
- 2026-06-04 13:09 UTCEPSS rescore
- 2026-06-02 20:10 UTCEPSS rescore
- 2026-06-02 20:10 UTCEPSS rescore
- 2026-06-01 13:49 UTCEPSS rescore
- 2026-06-01 13:49 UTCEPSS rescore
- 2026-05-31 22:28 UTCEPSS rescore
Related CVEs(same vendor + same CWE)
Same vendor
10 shownubuntu
- CVE-2004-0989EG 10.0EPSS p98HIGH
- CVE-2004-0990EG 10.0EPSS p98HIGH
- CVE-2004-1010EG 10.0EPSS p95HIGH
- CVE-2004-0941EG 10.0EPSS p96HIGH
- CVE-2004-0981EG 10.0EPSS p93HIGH
- CVE-2004-0882EG 10.0EPSS p96HIGH
- CVE-2004-0888EG 10.0EPSS p95HIGH
- CVE-2004-1012EG 10.0EPSS p93HIGH
- CVE-2004-1013EG 10.0EPSS p93HIGH
- CVE-2004-1018EG 10.0EPSS p97HIGH
Same CWE
10 shownCWE-787
Frequently asked(4)
What is CVE-2010-1451?
When was CVE-2010-1451 disclosed?
Is CVE-2010-1451 actively exploited?
How do I remediate CVE-2010-1451?
Dependency Blast Radius
See which npm, PyPI, Go, and Maven packages are affected by CVE-2010-1451
Is Your Infrastructure Affected by CVE-2010-1451?
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.