CVE-2010-3296: The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 d...

Security readout for executives and security teams

This is an old Linux kernel information leak in the Chelsio cxgb3 network driver. A local user could ask the driver for data and receive bytes left on the kernel stack. That may expose sensitive information, but the sources do not show remote exploitation or active exploitation. Exposure is most likely on systems running affected Linux kernels with the cxgb3 driver present and reachable by local users. Distribution kernels may differ because vendors backport fixes, so kernel package advisory status matters more than upstream version alone. Treat as a patch-management item, not an emergency internet-facing incident, unless affected hosts support untrusted local users or sensitive multi-tenant workloads. Prioritize vendor kernel updates during normal security maintenance. Mitigation focus: Apply the relevant vendor kernel security update for affected Linux distributions.; Upgrade to a kernel containing the 2.6.36-rc5-era cxgb3 initialization fix.; Review Red Hat, Ubuntu, SUSE, and VMware advisories if those platforms are in scope..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.