Description
The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2126-1 | New Linux 2.6.26 packages fix several issues |
EUVD |
EUVD-2010-3295 | The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call. |
Ubuntu USN |
USN-1041-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-1072-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-1074-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-1074-2 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-1083-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-1093-1 | Linux Kernel vulnerabilities (Marvell Dove) |
Ubuntu USN |
USN-1202-1 | Linux kernel (OMAP4) vulnerabilities |
References
History
No history.
Subscriptions
Canonical
Subscribe
Ubuntu Linux
Subscribe
Debian
Subscribe
Debian Linux
Subscribe
Linux
Subscribe
Linux Kernel
Subscribe
Opensuse
Subscribe
Opensuse
Subscribe
Redhat
Subscribe
Enterprise Linux
Subscribe
Enterprise Mrg
Subscribe
Suse
Subscribe
Linux Enterprise Desktop
Subscribe
Linux Enterprise Real Time Extension
Subscribe
Linux Enterprise Server
Subscribe
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T03:03:18.938Z
Reserved: 2010-09-13T00:00:00.000Z
Link: CVE-2010-3296
No data.
Status : Deferred
Published: 2010-09-30T15:00:02.723
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-3296
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN