CVE-2010-3876: Debian Linux

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

net/packet/af_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_RAW capability to read copies of the applicable structures.

Affected products

• Debian Debian Linux: version 5.0 only
• Linux Linux Kernel: before 2.6.37 (fixed in 2.6.37); version 2.6.37 only
• Opensuse Opensuse: version 11.2 only; version 11.3 only
• Suse Linux Enterprise Desktop: version 10 only
• Suse Linux Enterprise Real Time Extension: version 11 only
• Suse Linux Enterprise Server: version 9 only; version 10 only
• Suse Linux Enterprise Software Development Kit: version 10 only

Published 2011-01-03. Last modified 2026-06-16.