VDB
CVE-2010-3881
CVE-2010-3881
PUBLISHED
Reported by redhat · Published December 23, 2010
arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| linux | linux_kernel | |
| n/a | n/a | n/a, n/a, n/a |
Timeline
- Dec 23, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
References
- SUSE-SA:2011:004 vendor-advisoryx_refsource_SUSE
- [kvm] 20101030 [patch v2] x86: kvm: x86: fix information leak to userland mailing-listx_refsource_MLIST
- 44666 vdb-entryx_refsource_BID
- [oss-security] 20101105 Re: CVE request: kernel: kvm kernel stack leakage mailing-listx_refsource_MLIST
- x_refsource_CONFIRM
- 42932 third-party-advisoryx_refsource_SECUNIA
- ADV-2011-0124 vdb-entryx_refsource_VUPEN
- 1024912 vdb-entryx_refsource_SECTRACK
- SUSE-SA:2011:007 vendor-advisoryx_refsource_SUSE
- ADV-2011-0298 vdb-entryx_refsource_VUPEN
- x_refsource_CONFIRM
- x_refsource_CONFIRM
- x_refsource_CONFIRM
- [oss-security] 20101104 CVE request: kernel: kvm kernel stack leakage mailing-listx_refsource_MLIST
- RHSA-2010:0998 vendor-advisoryx_refsource_REDHAT
- ADV-2010-3287 vdb-entryx_refsource_VUPEN