CVE-2010-3881: Linux Kernel

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.

Affected products

• Linux Linux Kernel: before 2.6.36.2 (fixed in 2.6.36.2)
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Workstation: version 6.0 only
• Suse Suse Linux Enterprise Desktop: version 11 only
• Suse Suse Linux Enterprise High Availability Extension: version 11 only
• Suse Suse Linux Enterprise Server: version 11 only

Published 2010-12-23. Last modified 2026-06-16.