CVE-2010-3875

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

The ax25_getname function in net/ax25/af_ax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fe10ae53384e48c51996941b7720ee16995cbcb7
http://marc.info/?l=linux-netdev&m=128854507120898&w=2Patch, Third Party Advisory
http://openwall.com/lists/oss-security/2010/11/02/7Mailing List, Patch, Third Party Advisory
http://openwall.com/lists/oss-security/2010/11/04/5Mailing List, Patch, Third Party Advisory
http://www.debian.org/security/2010/dsa-2126Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2011:029Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:051Third Party Advisory
http://www.securityfocus.com/bid/44630Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=649713Issue Tracking, Patch, Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fe10ae53384e48c51996941b7720ee16995cbcb7
http://marc.info/?l=linux-netdev&m=128854507120898&w=2Patch, Third Party Advisory
http://openwall.com/lists/oss-security/2010/11/02/7Mailing List, Patch, Third Party Advisory
http://openwall.com/lists/oss-security/2010/11/04/5Mailing List, Patch, Third Party Advisory
http://www.debian.org/security/2010/dsa-2126Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2011:029Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:051Third Party Advisory
http://www.securityfocus.com/bid/44630Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=649713Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Jan 3, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-38761.9net/packet/af_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local user CVE-2010-38771.9The get_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local CVE-2010-38784.3Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP)CVE-2010-38795.8FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesyste CVE-2010-38804.9net/ipv4/inet_diag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INET_DIAG bytecode, which allows local users to cause a d CVE-2010-38812.1arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain pot CVE-2010-38824.3Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and earlier allow remote attackers to inject arbitrary web scri CVE-2010-38836.8Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote at CVE-2010-38846.8Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack the authentication of CVE-2010-38864.3The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID val CVE-2010-38874.3The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly enforce the correspondence whiteli CVE-2010-38887.2Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited i