CVE-2010-4073

[CVE catalog]

Severity

Unknown

Published

Oct 6, 2010, 12:00:00 AM UTC

Updated

Mar 9, 2026, 1:22:58 AM UTC

Source

[NVD] · [CVE record]

EPSS

1.48% · Oct 27, 2026

The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c. kernel: ipc/compat*.c: reading uninitialized stack memory This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 3 as it did not include IPC compat functionality. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.