kernel: drivers/serial/serial_core.c: reading uninitialized stack memory

🗓️ 18 Jan 2011 17:41:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 2 Views

Kernel serial core leaks uninitialized stack memory via TIOCGICOUNT in older kernels.

Reporter	Title	Published	Views	Family All 146
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	4	i686	kernel	0:2.6.9-89.35.1.EL	kernel-0:2.6.9-89.35.1.EL.i686.rpm
Red Hat Enterprise Linux	4	ia64	kernel	0:2.6.9-89.35.1.EL	kernel-0:2.6.9-89.35.1.EL.ia64.rpm
Red Hat Enterprise Linux	4	ppc64	kernel	0:2.6.9-89.35.1.EL	kernel-0:2.6.9-89.35.1.EL.ppc64.rpm
Red Hat Enterprise Linux	4	ppc64iseries	kernel	0:2.6.9-89.35.1.EL	kernel-0:2.6.9-89.35.1.EL.ppc64iseries.rpm
Red Hat Enterprise Linux	4	s390	kernel	0:2.6.9-89.35.1.EL	kernel-0:2.6.9-89.35.1.EL.s390.rpm
Red Hat Enterprise Linux	4	s390x	kernel	0:2.6.9-89.35.1.EL	kernel-0:2.6.9-89.35.1.EL.s390x.rpm
Red Hat Enterprise Linux	4	x86_64	kernel	0:2.6.9-89.35.1.EL	kernel-0:2.6.9-89.35.1.EL.x86_64.rpm
Red Hat Enterprise Linux	4	i686	kernel-debuginfo	0:2.6.9-89.35.1.EL	kernel-debuginfo-0:2.6.9-89.35.1.EL.i686.rpm
Red Hat Enterprise Linux	4	ia64	kernel-debuginfo	0:2.6.9-89.35.1.EL	kernel-debuginfo-0:2.6.9-89.35.1.EL.ia64.rpm
Red Hat Enterprise Linux	4	ppc64	kernel-debuginfo	0:2.6.9-89.35.1.EL	kernel-debuginfo-0:2.6.9-89.35.1.EL.ppc64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2010-4075
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-4075
cve	www.cve.org/CVERecord

21 Nov 2025 17:37Current

6.1Medium risk

Vulners AI Score6.1

CVSS 21.9

EPSS0.00387

linux kernel serial core uninitialized memory information disclosure