CVE-2010-3875: Debian Linux

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The ax25_getname function in net/ax25/af_ax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.

Affected products

• Debian Debian Linux: version 5.0 only
• Linux Linux Kernel: before 2.6.37 (fixed in 2.6.37); version 2.6.37 only

Published 2011-01-03. Last modified 2026-06-16.