CVE-2010-4074

CVE-2010-4074 describes an information disclosure vulnerability in the Linux kernel's USB subsystem, affecting versions before 2.6.36-rc5, specifically within the mos7720_ioctl and mos7840_ioctl functions. This flaw allows local users to potentially extract sensitive data from kernel stack memory due to improper initialization of structure members during TIOCGICOUNT ioctl calls. With a low CVSS score of 1.9, the attack requires local access and moderate complexity, resulting in a potential impact of partial confidentiality compromise. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.