CVE-2010-4076

EUVD-2010-4052
The rs_ioctl function in drivers/char/amiserial.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
1.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
𝑥
≤ 2.6.36.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
dapper
dne
hardy
Fixed 2.6.24-29.91
released
karmic
ignored
lucid
Fixed 2.6.32-34.73
released
maverick
Fixed 2.6.35-30.55
released
natty
not-affected
linux-ec2
dapper
dne
hardy
dne
karmic
ignored
lucid
Fixed 2.6.32-318.37
released
maverick
ignored
natty
dne
linux-fsl-imx51
dapper
dne
hardy
dne
karmic
ignored
lucid
Fixed 2.6.31-610.27
released
maverick
dne
natty
dne
linux-lts-backport-maverick
dapper
dne
hardy
dne
karmic
dne
lucid
Fixed 2.6.35-30.55~lucid1
released
maverick
dne
natty
dne
linux-lts-backport-natty
hardy
dne
lucid
not-affected
maverick
dne
natty
dne
linux-mvl-dove
dapper
dne
hardy
dne
karmic
ignored
lucid
Fixed 2.6.32-218.35
released
maverick
Fixed 2.6.32-418.35
released
natty
dne
linux-source-2.6.15
dapper
ignored
hardy
dne
karmic
dne
lucid
dne
maverick
dne
natty
dne
linux-ti-omap4
dapper
dne
hardy
dne
karmic
dne
lucid
dne
maverick
Fixed 2.6.35-903.23
released
natty
not-affected