CVE-2010-1083

CVE-2010-1083 describes a vulnerability in the Linux kernel's USB device I/O handling, specifically within the processcompl_compat function in drivers/usb/core/devio.c, affecting versions 2.6.x through 2.6.32. This flaw allows for information disclosure, as the transfer buffer is not cleared after a failed USB command, potentially exposing kernel memory to physically proximate attackers. The vulnerability has a CVSS score of 4.7, indicating a medium severity, with a local attack vector and medium attack complexity, leading to a complete confidentiality impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.