CVE-2010-4078

14

FAUCET Score

CVE-2010-4078 is a local information disclosure vulnerability affecting the Linux kernel (before 2.6.36-rc6), specifically within the sisfb_ioctl function, impacting distributions like Debian, openSUSE, and SUSE. It allows local users to extract sensitive data from kernel stack memory due to improper structure initialization. With a CVSS score of 1.9, this vulnerability has low severity, requiring local access and medium attack complexity to achieve a partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 2.6.36CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		2.6.36CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel:2.6.36:-::::::
		2.6.36CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel:2.6.36:rc1::::::
		2.6.36CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel:2.6.36:rc2::::::
		2.6.36CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel:2.6.36:rc3::::::

CVSS Data

CVSS version used by this source: 2.0

1.9LOW

AV:L/AC:M/Au:N/C:P/I:N/A:N

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Exploitability Score

3.4

Impact Score

2.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

0.38%

Probability of exploitation in next 30 days

EPSS Percentile

30.7%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0038 is in the 70th percentile among its peer group of 747 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

redhatpatch availablevia nvd_reference

Vendor Advisories (1)

redhatCVE-2010-4078Low

kernel: drivers/video/sis/sis_main.c: reading uninitialized stack memory

References

lists.opensuse.org / opensuse-security-announce/2010-12/msg00004.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2011-01/msg00000.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2011-01/msg00001.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2011-02/msg00000.html

Mailing ListThird Party Advisory

bugzilla.redhat.com / show_bug.cgi

Issue TrackingPatchThird Party Advisory

secunia.com / advisories/42778

Third Party Advisory

secunia.com / advisories/42801

Third Party Advisory

debian.org / security/2010/dsa-2126

Third Party Advisory

kernel.org / pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc6

Broken Link

mandriva.com / security/advisories

Third Party Advisory

openwall.com / lists/oss-security/2010/09/25/2

Mailing ListPatchThird Party Advisory

openwall.com / lists/oss-security/2010/10/06/6

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2010/10/07/1

Mailing ListPatchThird Party Advisory

openwall.com / lists/oss-security/2010/10/25/3

Mailing ListPatchThird Party Advisory

securityfocus.com / bid/43810

Third Party AdvisoryVDB Entry

vupen.com / english/advisories/2011/0012

Third Party Advisory

vupen.com / english/advisories/2011/0298

Third Party Advisory