VULNERABILITY INTELLIGENCE
CVE-2010-4525
CVSS score1.9 LOW
EPSS probability0.34%
CISA KEVNot currently listed
Published2011-01-11
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:N/A:N
Description
Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm_vcpu_events->interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor