CVE-2010-3876 is a low-severity information disclosure vulnerability affecting the Linux kernel (before 2.6.37-rc2), specifically in the net/packet/af_packet.c component, and impacts distributions like Debian, openSUSE, and SUSE. It allows local users with CAP_NET_RAW capability to read sensitive kernel stack memory due to uninitialized structure members. The attack requires local access and medium complexity, with a potential impact of partial confidentiality loss. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.6.37CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
2.6.37CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.6.37:-:*:*:*:*:*:* | ||
2.6.37CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.6.37:rc1:*:*:*:*:*:* | ||
11.2CPE matchmatch criteria | cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:* | ||
11.3CPE matchmatch criteria | cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:M/Au:N/C:P/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.