VDB
CVE-2010-4074
CVE-2010-4074
PUBLISHED
Reported by mitre · Published November 29, 2010
The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a, n/a |
| linux | linux_kernel |
Timeline
- Nov 29, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
References
- x_refsource_CONFIRM
- [oss-security] 20100925 CVE request: multiple kernel stack memory disclosures mailing-listx_refsource_MLIST
- x_refsource_CONFIRM
- [oss-security] 20101006 Re: CVE request: multiple kernel stack memory disclosures mailing-listx_refsource_MLIST
- x_refsource_CONFIRM
- RHSA-2011:0007 vendor-advisoryx_refsource_REDHAT
- [linux-kernel] 20100915 [PATCH] drivers/usb/serial/mos*: prevent reading uninitialized stack memory mailing-listx_refsource_MLIST
- RHSA-2010:0958 vendor-advisoryx_refsource_REDHAT
- [oss-security] 20101006 Re: CVE request: multiple kernel stack memory disclosures mailing-listx_refsource_MLIST
- 45074 vdb-entryx_refsource_BID
- 42890 third-party-advisoryx_refsource_SECUNIA
- [oss-security] 20101025 Re: CVE request: multiple kernel stack memory disclosures mailing-listx_refsource_MLIST
- DSA-2126 vendor-advisoryx_refsource_DEBIAN