CVE-2010-4072

CVE-2010-4072 describes an information disclosure vulnerability in the Linux kernel, specifically affecting versions before 2.6.37-rc1, including distributions like Canonical, Debian, openSUSE, and SUSE. This flaw, located in the copy_shmid_to_user function, allows local users to potentially access sensitive data from kernel stack memory through the shmctl system call's "old shm interface." With a CVSS score of 1.9, it's considered low severity, requiring local access and medium attack complexity to achieve partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.