Information disclosure in Linux Kernel

CVE-2010-4525

Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm_vcpu_events->interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors.

Vulnerability class: Information Disclosure

EPSS: 0.003 (26.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References