cbcvebase.
CVE-2010-3296
published 2010-09-30

CVE-2010-3296: The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure…

low2.1CVSS 3.1
AVLACLAuNCPINAN
The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call.

Affected

13 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux——
canonicalubuntu_linux——
canonicalubuntu_linux——
debiandebian_linux——
linuxlinux_kernel< 2.6.362.6.36
linuxlinux_kernel——
opensuseopensuse——
suselinux_enterprise_desktop——
suselinux_enterprise_real_time_extension——
suselinux_enterprise_server——
vmwarevmware_esxi——
vmwarevmware_workstation——
vmwarevsphere——