CVE-2010-4525: Linux Kernel

Low severity, CVSS 1.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm_vcpu_events->interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors.

Affected products

• Linux Linux Kernel: version 2.6.33 only; version 2.6.34 only

Published 2011-01-11. Last modified 2026-06-16.