CVE-2010-4075: Linux Kernel

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The uart_get_count function in drivers/serial/serial_core.c in the Linux kernel before 2.6.37-rc1 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.

Affected products

• Linux Linux Kernel: before 2.6.37 (fixed in 2.6.37)

Published 2010-11-29. Last modified 2026-06-16.