CVE-2010-3861

The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local…

published December 10, 2010

CVSS
—
EPSS
0%
Percentile
33.8
In the wild
Unconfirmed
What it is

The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local users to obtain potentially sensitive information via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value, a different vulnerability than CVE-2010-2478.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00407 · 33.8th percentile
Published
2010-12-10T18:00Z
EPSS history
Timeline
  • 10 DEC 18:00Z
    The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local…
    cvelistv5