CVE-2010-4076: Linux Kernel

Low severity, CVSS 1.9. EPSS: 0.3% chance of exploitation in the next 30 days.

The rs_ioctl function in drivers/char/amiserial.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.

Affected products

• Linux Linux Kernel: up to and including 2.6.36.1

Published 2010-11-29. Last modified 2026-06-16.