CVE-2010-3298

Publication date 30 September 2010

Last updated 24 July 2024

The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.

From the Ubuntu Security Team

Dan Rosenberg discovered that several network ioctls did not clear kernel memory correctly. A local user could exploit this to read kernel stack memory, leading to a loss of privacy.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
linux	10.10 maverick	Fixed 2.6.35-24.42
	10.04 LTS lucid	Fixed 2.6.32-27.49
	9.10 karmic	Fixed 2.6.31-22.70
	9.04 jaunty	Ignored end of life
	8.04 LTS hardy	Not affected
	6.06 LTS dapper	Not in release
linux-ec2	10.10 maverick	Ignored end of life
	10.04 LTS lucid	Fixed 2.6.32-311.23
	9.10 karmic	Fixed 2.6.31-307.23
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not in release
linux-fsl-imx51	10.10 maverick	Not in release
	10.04 LTS lucid	Fixed 2.6.31-608.22
	9.10 karmic	Fixed 2.6.31-112.30
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not in release
linux-lts-backport-maverick	10.10 maverick	Not in release
	10.04 LTS lucid	Fixed 2.6.35-25.44~lucid1
	9.10 karmic	Not in release
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not in release
linux-source-2.6.15	10.10 maverick	Not in release
	10.04 LTS lucid	Not in release
	9.10 karmic	Not in release
	9.04 jaunty	Not in release
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not affected

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
linux	Upstream: http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git;a=commit;h=7011e660938fc44ed86319c18a5954e95a82ab3e Karmic: http://chinstrap.ubuntu.com/~ogasawara/CVEs/CVE-2010-3298/patches/karmic/linux/0001-drivers-net-usb-hso.c-prevent-reading-uninitialized-me.txt Lucid: http://chinstrap.ubuntu.com/~ogasawara/CVEs/CVE-2010-3298/patches/lucid/linux/0001-drivers-net-usb-hso.c-prevent-reading-uninitialized-me.txt Maverick: http://chinstrap.ubuntu.com/~ogasawara/CVEs/CVE-2010-3298/patches/maverick/linux/0001-drivers-net-usb-hso.c-prevent-reading-uninitialized-me.txt

Package

Patch details

linux

References

Related Ubuntu Security Notices (USN)

USN-1083-1
Linux kernel vulnerabilities
3 March 2011

USN-1074-1
Linux kernel vulnerabilities
25 February 2011

USN-1041-1
Linux kernel vulnerabilities
10 January 2011

USN-1074-2
Linux kernel vulnerabilities
28 February 2011

USN-1093-1
Linux Kernel vulnerabilities (Marvell Dove)
25 March 2011

CVE-2010-3298

From the Ubuntu Security Team

Status

Patch details

References

Related Ubuntu Security Notices (USN)

Other references