CVE-2010-4525

Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm_vcpu_events->interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
1.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:P/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 30%
VendorProductVersion
linuxlinux_kernel
2.6.33
linuxlinux_kernel
2.6.34
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
not-affected
hardy
not-affected
dapper
dne
linux-ec2
natty
dne
maverick
ignored
lucid
not-affected
karmic
not-affected
hardy
dne
dapper
dne
linux-fsl-imx51
natty
dne
maverick
dne
lucid
not-affected
karmic
ignored
hardy
dne
dapper
dne
linux-lts-backport-maverick
natty
dne
maverick
dne
lucid
not-affected
karmic
dne
hardy
dne
dapper
dne
linux-lts-backport-natty
natty
dne
maverick
dne
lucid
not-affected
hardy
dne
linux-mvl-dove
natty
dne
maverick
not-affected
lucid
not-affected
karmic
ignored
hardy
dne
dapper
dne
linux-source-2.6.15
natty
dne
maverick
dne
lucid
dne
karmic
dne
hardy
dne
dapper
not-affected
linux-ti-omap4
natty
not-affected
maverick
not-affected
lucid
dne
karmic
dne
hardy
dne
dapper
dne