CVE-2010-4074
The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain...
1.9 Low
The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.
Exploit likelihood
0.38%Down 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.
- Record
CVE-2010-4074- CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.
- Record
CVE-2010-4074- Updated
- 2026-11-02
EUVDEUVD-2010-4050 No score
The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.
- Record
EUVD-2010-4050- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fjxv-x673-382q No score
The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain...
The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.
- Record
GHSA-fjxv-x673-382q- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVBELL-CVE-2010-4074
CVE-2010-4074 does not affect BellSoft software
- Record
BELL-CVE-2010-4074- CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:5.0 From an advisory covering 33 CVEs |
before 2.6.26-26lenny1, plus listed versions 2.6.26-132.6.26-13lenny22.6.26-13lenny2~bpo40+12.6.26-142.6.26-15 Show 32 moreShow less2.6.26-15lenny12.6.26-15lenny22.6.26-15lenny32.6.26-15~bpo40+12.6.26-15~bpo40+22.6.26-162.6.26-172.6.26-17lenny12.6.26-17lenny22.6.26-17lenny2~bpo40+12.6.26-17~bpo40+12.6.26-182.6.26-192.6.26-19lenny12.6.26-19lenny22.6.26-19~bpo40+12.6.26-202.6.26-20~bpo40+12.6.26-212.6.26-21lenny12.6.26-21lenny22.6.26-21lenny32.6.26-21lenny42.6.26-21~bpo40+12.6.26-222.6.26-22lenny12.6.26-232.6.26-242.6.26-24lenny12.6.26-252.6.26-25lenny12.6.26-26 |
2.6.26-26lenny1 |
kernel-rtRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernel-rt-debugRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernel-rt-debuginfo-commonRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernel-rt-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernel-rt-docRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernel-rt-traceRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
Show 60 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
perfRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
perf-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 21 CVEs |
before 0:2.6.33.7-rt29.47.el5rt | 0:2.6.33.7-rt29.47.el5rt |
kernelRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-develRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-docRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
perfRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernelRed Hat:enterprise_linux:6::computenode From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
perfRed Hat:enterprise_linux:6::computenode From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernelRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
perfRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs |
before 0:2.6.32-71.14.1.el6 | 0:2.6.32-71.14.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4074 is a low vulnerability (CVSS 1.9) in Debian Linux, published November 26, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. No source names a fixed version.
References
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a0846f1868b11cd827bdfeaf4527d8b1b1c0b098
openwall.com/lists/oss-security/2010/09/25/2
kernel.org/pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc5
bugzilla.redhat.com/show_bug.cgi?id=648659
redhat.com/support/errata/RHSA-2011-0007.html
Show 176 moreShow less
lkml.org/lkml/2010/9/15/392
securityfocus.com/bid/45074
secunia.com/advisories/42890
debian.org/security/2010/dsa-2126
nvd.nist.gov/vuln/detail/CVE-2010-4074
github.com/advisories/GHSA-fjxv-x673-382q
docs.bell-sw.com/security/cves/CVE-2010-4074
access.redhat.com/errata/RHSA-2010:0958
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0958.json
cve.org/CVERecord?id=CVE-2010-2962
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Technical_Notes/ape.html