CVE-2010-3877: Debian Linux

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The get_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.

Affected products

• Debian Debian Linux: version 5.0 only
• Linux Linux Kernel: before 2.6.37 (fixed in 2.6.37); version 2.6.37 only

Published 2011-01-03. Last modified 2026-06-16.