CVE-2010-3296

CVE-2010-3296 describes an information disclosure vulnerability in the Linux kernel, specifically affecting the cxgb3 network driver in versions prior to 2.6.36-rc5. This flaw allows local users to potentially access sensitive kernel stack memory due to an uninitialized structure member during a CHELSIO_GET_QSET_NUM ioctl call, impacting distributions like Canonical, Debian, and SUSE. With a CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), it is a low-severity vulnerability requiring local access to achieve partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not a widely targeted or discussed threat.