CVE-2010-4074

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36-rc5

Description The issue concerns the USB subsystem in the Linux kernel, which does not properly initialize certain structure members. This allows local users to obtain potentially sensitive information from kernel stack memory. The issue is related to vectors involving TIOCGICOUNT ioctl calls, specifically affecting the mos7720 ioctl function in drivers/usb/serial/mos7720.c and the mos7840 ioctl function in drivers/usb/serial/mos7840.c.

Recommendations For Linux kernel versions prior to 2.6.36-rc5, update to version 2.6.36-rc5 or later to resolve the issue.