CVE-2010-4074 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2010-4074 Interim 1 9 2022-12-14T02:45:15Z current 2021-05-30T12:54:35Z 2022-12-14T02:45:15Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2010-4074 The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Real Time 11 SP1 brocade-bna-kmp-rt-2.1.0.0_2.6.33.18_rt31_0.3-0.2.24 cluster-network-kmp-rt-1.4_2.6.33.18_rt31_0.3-2.5.6 cluster-network-kmp-rt_trace-1.4_2.6.33.18_rt31_0.3-2.5.6 drbd-kmp-rt-8.3.11_2.6.33.18_rt31_0.3-0.3.6 drbd-kmp-rt_trace-8.3.11_2.6.33.18_rt31_0.3-0.3.6 iscsitarget-kmp-rt-1.4.19_2.6.33.18_rt31_0.3-0.7.48 kernel-rt-2.6.33.18-0.3.1 kernel-rt-base-2.6.33.18-0.3.1 kernel-rt-devel-2.6.33.18-0.3.1 kernel-rt_trace-2.6.33.18-0.3.1 kernel-rt_trace-base-2.6.33.18-0.3.1 kernel-rt_trace-devel-2.6.33.18-0.3.1 kernel-source-rt-2.6.33.18-0.3.1 kernel-syms-rt-2.6.33.18-0.3.1 ocfs2-kmp-rt-1.6_2.6.33.18_rt31_0.3-0.4.2.6 ocfs2-kmp-rt_trace-1.6_2.6.33.18_rt31_0.3-0.4.2.6 ofed-kmp-rt-1.4.2_2.6.33.7.2_rt30_0.3-0.14.1 brocade-bna-kmp-rt-2.1.0.0_2.6.33.18_rt31_0.3-0.2.24 as a component of SUSE Linux Enterprise Real Time 11 SP1 cluster-network-kmp-rt-1.4_2.6.33.18_rt31_0.3-2.5.6 as a component of SUSE Linux Enterprise Real Time 11 SP1 cluster-network-kmp-rt_trace-1.4_2.6.33.18_rt31_0.3-2.5.6 as a component of SUSE Linux Enterprise Real Time 11 SP1 drbd-kmp-rt-8.3.11_2.6.33.18_rt31_0.3-0.3.6 as a component of SUSE Linux Enterprise Real Time 11 SP1 drbd-kmp-rt_trace-8.3.11_2.6.33.18_rt31_0.3-0.3.6 as a component of SUSE Linux Enterprise Real Time 11 SP1 iscsitarget-kmp-rt-1.4.19_2.6.33.18_rt31_0.3-0.7.48 as a component of SUSE Linux Enterprise Real Time 11 SP1 kernel-rt-2.6.33.18-0.3.1 as a component of SUSE Linux Enterprise Real Time 11 SP1 kernel-rt-base-2.6.33.18-0.3.1 as a component of SUSE Linux Enterprise Real Time 11 SP1 kernel-rt-devel-2.6.33.18-0.3.1 as a component of SUSE Linux Enterprise Real Time 11 SP1 kernel-rt_trace-2.6.33.18-0.3.1 as a component of SUSE Linux Enterprise Real Time 11 SP1 kernel-rt_trace-base-2.6.33.18-0.3.1 as a component of SUSE Linux Enterprise Real Time 11 SP1 kernel-rt_trace-devel-2.6.33.18-0.3.1 as a component of SUSE Linux Enterprise Real Time 11 SP1 kernel-source-rt-2.6.33.18-0.3.1 as a component of SUSE Linux Enterprise Real Time 11 SP1 kernel-syms-rt-2.6.33.18-0.3.1 as a component of SUSE Linux Enterprise Real Time 11 SP1 ocfs2-kmp-rt-1.6_2.6.33.18_rt31_0.3-0.4.2.6 as a component of SUSE Linux Enterprise Real Time 11 SP1 ocfs2-kmp-rt_trace-1.6_2.6.33.18_rt31_0.3-0.4.2.6 as a component of SUSE Linux Enterprise Real Time 11 SP1 ofed-kmp-rt-1.4.2_2.6.33.7.2_rt30_0.3-0.14.1 as a component of SUSE Linux Enterprise Real Time 11 SP1 The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c. CVE-2010-4074 SUSE Linux Enterprise Real Time 11 SP1:brocade-bna-kmp-rt-2.1.0.0_2.6.33.18_rt31_0.3-0.2.24 SUSE Linux Enterprise Real Time 11 SP1:cluster-network-kmp-rt-1.4_2.6.33.18_rt31_0.3-2.5.6 SUSE Linux Enterprise Real Time 11 SP1:cluster-network-kmp-rt_trace-1.4_2.6.33.18_rt31_0.3-2.5.6 SUSE Linux Enterprise Real Time 11 SP1:drbd-kmp-rt-8.3.11_2.6.33.18_rt31_0.3-0.3.6 SUSE Linux Enterprise Real Time 11 SP1:drbd-kmp-rt_trace-8.3.11_2.6.33.18_rt31_0.3-0.3.6 SUSE Linux Enterprise Real Time 11 SP1:iscsitarget-kmp-rt-1.4.19_2.6.33.18_rt31_0.3-0.7.48 SUSE Linux Enterprise Real Time 11 SP1:kernel-rt-2.6.33.18-0.3.1 SUSE Linux Enterprise Real Time 11 SP1:kernel-rt-base-2.6.33.18-0.3.1 SUSE Linux Enterprise Real Time 11 SP1:kernel-rt-devel-2.6.33.18-0.3.1 SUSE Linux Enterprise Real Time 11 SP1:kernel-rt_trace-2.6.33.18-0.3.1 SUSE Linux Enterprise Real Time 11 SP1:kernel-rt_trace-base-2.6.33.18-0.3.1 SUSE Linux Enterprise Real Time 11 SP1:kernel-rt_trace-devel-2.6.33.18-0.3.1 SUSE Linux Enterprise Real Time 11 SP1:kernel-source-rt-2.6.33.18-0.3.1 SUSE Linux Enterprise Real Time 11 SP1:kernel-syms-rt-2.6.33.18-0.3.1 SUSE Linux Enterprise Real Time 11 SP1:ocfs2-kmp-rt-1.6_2.6.33.18_rt31_0.3-0.4.2.6 SUSE Linux Enterprise Real Time 11 SP1:ocfs2-kmp-rt_trace-1.6_2.6.33.18_rt31_0.3-0.4.2.6 SUSE Linux Enterprise Real Time 11 SP1:ofed-kmp-rt-1.4.2_2.6.33.7.2_rt30_0.3-0.14.1 moderate 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N