CVE-2010-1083

The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer…

published April 6, 2010

CVSS
—
EPSS
0%
Percentile
28.7
In the wild
Unconfirmed
What it is

The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate attackers to obtain sensitive information (kernel memory).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00361 · 28.7th percentile
Published
2010-04-06T22:00Z
EPSS history
Timeline
  • 06 APR 22:00Z
    The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer…
    cvelistv5