CVE-2010-3877

CVE-2010-3877 is a local information disclosure vulnerability in the Linux kernel, specifically affecting the get_name function in net/tipc/socket.c in versions prior to 2.6.37-rc2, including various Debian distributions. The vulnerability stems from an uninitialized structure, allowing local users to read sensitive data from kernel stack memory. With a CVSS score of 1.9 (low severity), exploitation requires local access and medium attack complexity, resulting in a potential impact of partial confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.