CVE-2010-4074: Infoleak
Description of problem: The TIOCGICOUNT device ioctl in both mos7720.c and mos7840.c allows unprivileged users to read uninitialized stack memory, because the "reserved" member of the serialicounterstruct struct declared on the stack is not altered or zeroed before being copied back to the user.
Reference: http://www.openwall.com/lists/oss-security/2010/10/06/6 http://lkml.org/lkml/2010/9/15/392
Acknowledgements:
Red Hat would like to thank Dan Rosenberg for reporting this issue.
Other sources
The USB subsystem in the Linux kernel before 2.6.36-rc5 does not prope ...
— Debian
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4074?
CVE-2010-4074 is considered to have a medium severity due to the potential for unprivileged users to read sensitive information from uninitialized stack memory.
How do I fix CVE-2010-4074?
To fix CVE-2010-4074, it is recommended to update to a patched version of the Linux kernel that addresses this vulnerability.
Which versions of the Linux kernel are affected by CVE-2010-4074?
CVE-2010-4074 affects Linux kernel versions prior to 2.6.36, including the 2.6.36 release candidates.
Can CVE-2010-4074 be exploited remotely?
CVE-2010-4074 does not appear to be a remote exploit, as it requires local access to the affected systems.
What are the potential consequences of CVE-2010-4074?
The potential consequences of CVE-2010-4074 include unauthorized access to sensitive data stored in uninitialized memory.