CVE-2010-2955

CVE-2010-2955 is a local information disclosure vulnerability affecting the Linux kernel before version 2.6.36-rc3-next-20100831, specifically within the cfg80211_wext_giwessid function. This flaw allows local users to extract potentially sensitive information from kernel heap memory due to an uninitialized structure member and an off-by-one error during an SIOCGIWESSID ioctl call with a large buffer size. The vulnerability has a low severity CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), indicating local access is required for exploitation, with a potential impact of partial confidentiality loss. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.