UBUNTU-CVE-2010-2955

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2010-2955
Published: 08 Sept 2010, 00:00
Last modified:04 Feb 2026, 03:25

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

08 Sept 2010, 00:00
Published
Vulnerability first disclosed
04 Feb 2026, 03:25
Last Modified
Vulnerability information updated

Description

The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users to leverage an off-by-one error in the ioctl_standard_iw_point function in net/wireless/wext-core.c, and obtain potentially sensitive information from kernel heap memory, via vectors involving an SIOCGIWESSID ioctl call that specifies a large buffer size.

Affected Systems

  • ubuntu•linux

    < 3.11.0-12.19

  • ubuntu•linux-flo

    < 3.4.0-1.3

  • ubuntu•linux-goldfish

    < 3.4.0-1.9

  • ubuntu•linux-grouper

    < 3.1.10-8.28

  • ubuntu•linux-lts-utopic

    < 3.16.0-25.33~14.04.2

  • ubuntu•linux-lts-vivid

    < 3.19.0-18.18~14.04.1

  • ubuntu•linux-maguro

    < 3.0.0-3.18

  • ubuntu•linux-mako

    < 3.4.0-3.21

  • ubuntu•linux-manta

    < 3.4.0-4.19

References (8)