CVE Daily

CVE-2010-4074

The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initia...

Low CVSS 1.9

Overview

The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.

CWE: CWE-200 Published: 2010-11-29T16:00:02.900
Risk analysis

This vulnerability is rated 🟢 LOW.

  • CVSS: 1.9 (LOW)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags