CVE-2010-4077

CVE-2010-4077 describes an information disclosure vulnerability in the ntty_ioctl_tiocgicount function within the Linux kernel (versions 2.6.36.1 and earlier), specifically affecting the drivers/char/nozomi.c component. A local attacker can exploit this flaw via a TIOCGICOUNT ioctl call to obtain potentially sensitive information from kernel stack memory due to improper initialization of a structure member. This vulnerability has a low CVSS score of 1.9, indicating a local attack vector with medium attack complexity and a partial impact on confidentiality. While there is an ExploitDB entry (EDB-16973) demonstrating a similar leak in a later kernel version, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.