CVE-2010-4525

Published: Jan 11, 2011Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm_vcpu_events->interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors.

Affected (2)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.33
Linux Linux Kernel	Version 2.6.34

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (22)

http://osvdb.org/70377

Source: secalert@redhat.com

http://secunia.com/advisories/42890

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/01/05/1

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/01/05/9

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/01/06/3

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-0007.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-0028.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/45676

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0123

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4525

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/64519

Source: secalert@redhat.com

http://osvdb.org/70377