Unscored severity · published Nov 29, 2010
CVE-2010-4072
The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface."
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
before 2.6.37; 2.6.37 · source: NVD
DL
Debian Linux · Debian
5.0 · source: NVD
LE
Linux Enterprise Desktop · Suse
10; 11 · source: NVD
LE
Linux Enterprise Real Time Extension · Suse
11 · source: NVD
LE
Linux Enterprise Server · Suse
9; 10; 11 · source: NVD
LE
Linux Enterprise Software Development Kit · Suse
10 · source: NVD
OP
Opensuse · Opensuse
11.3 · source: NVD
UL
Ubuntu Linux · Canonical
6.06; 9.10; 10.04; 10.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4072
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4072
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3af54c9bd9e6f14f896aac1bb0e8405ae0bc7a44
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability