CVE-2010-4655

net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability for an ethtool ioctl call.

• CWE-665

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b00916b189d13a615ff05c9242201135992fcda3
• http://openwall.com/lists/oss-security/2011/01/24/9Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/01/25/3Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/01/25/4Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/01/25/5Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/01/28/1Mailing List, Patch, Third Party Advisory
• http://secunia.com/advisories/46397Broken Link
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36Broken Link
• http://www.securityfocus.com/archive/1/520102/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/45972Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
• http://www.vmware.com/security/advisories/VMSA-2011-0012.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=672428Issue Tracking, Patch, Third Party Advisory
• https://lkml.org/lkml/2010/10/7/297Mailing List, Patch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b00916b189d13a615ff05c9242201135992fcda3
• http://openwall.com/lists/oss-security/2011/01/24/9Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/01/25/3Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/01/25/4Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/01/25/5Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/01/28/1Mailing List, Patch, Third Party Advisory
• http://secunia.com/advisories/46397Broken Link
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36Broken Link
• http://www.securityfocus.com/archive/1/520102/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/45972Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
• http://www.vmware.com/security/advisories/VMSA-2011-0012.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=672428Issue Tracking, Patch, Third Party Advisory
• https://lkml.org/lkml/2010/10/7/297Mailing List, Patch, Third Party Advisory

Published

Jul 18, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4649Integer overflow in the ib_uverbs_poll_cq function in driver…
• CVE-2010-4650Buffer overflow in the fuse_do_ioctl function in fs/fuse/fil…
• CVE-2010-4651Directory traversal vulnerability in util.c in GNU patch 2.6…
• CVE-2010-4652Heap-based buffer overflow in the sql_prepare_where function…
• CVE-2010-4653An integer overflow condition in poppler before 0.16.3 can o…6.5
• CVE-2010-4654poppler before 0.16.3 has malformed commands that may cause …7.8
• CVE-2010-4656The iowarrior_write function in drivers/usb/misc/iowarrior.c…7.8
• CVE-2010-4657PHP5 before 5.4.4 allows passing invalid utf-8 strings via t…7.5
• CVE-2010-4658statusnet through 2010 allows attackers to spoof syslog mess…5.3
• CVE-2010-4659Cross-site scripting (XSS) vulnerability in statusnet throug…6.1
• CVE-2010-4660Unspecified vulnerability in statusnet through 2010 due to t…9.8
• CVE-2010-4661udisks before 1.0.3 allows a local user to load arbitrary Li…7.8