vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2010-2955

N/A
Published: September 8, 2010 at 07:00 PM UTC
Updated: June 16, 2026 at 11:21 PM UTC
6 products affected across 4 vendorsLinux KernelUbuntu LinuxopenSUSE

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.4%

Description

The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users to leverage an off-by-one error in the ioctl_standard_iw_point function in net/wireless/wext-core.c, and obtain potentially sensitive information from kernel heap memory, via vectors involving an SIOCGIWESSID ioctl call that specifies a large buffer size.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

References (18)

x_refsource_MISCThird Party Advisory
Source: [email protected]
http://forums.grsecurity.net/viewtopic.php?f=3&t=2290
x_refsource_CONFIRM
Source: [email protected]
http://git.kernel.org/?p=linux/kernel/git/linville/wireless-2.6.git%3Ba=commit%3Bh=42da2f948d949efd0111309f5827bf0298bcc9a4
x_refsource_MISCBroken Link
Source: [email protected]
http://grsecurity.net/~spender/wireless-infoleak-fix2.patch
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
Mailing Listx_refsource_MLISTPatchThird Party Advisory
Source: [email protected]
http://lkml.org/lkml/2010/8/27/413
Mailing Listx_refsource_MLISTPatchThird Party Advisory
Source: [email protected]
http://lkml.org/lkml/2010/8/30/127
Mailing Listx_refsource_MLISTPatchThird Party Advisory
Source: [email protected]
http://lkml.org/lkml/2010/8/30/146

CVSS

2.1LOW[email protected]
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-193

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card