CVE-2010-3297: The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly...

Security readout for executives and security teams

This is an old Linux kernel information disclosure flaw. A local user could ask the EQL network driver for configuration data and receive bytes from kernel stack memory that should have been cleared first. It is not listed as known exploited in KEV, and the provided sources do not give a CVSS score. Exposure is most relevant to systems running affected pre-2.6.36-rc5 Linux kernels where local users can reach the EQL_GETMASTRCFG ioctl path. The supplied affected-product metadata is incomplete, so validate against actual kernel packages and vendor advisories. Prioritize remediation on legacy Linux systems with shared user access. This is not a KEV-listed emergency, but kernel memory disclosure can weaken defense-in-depth and should be cleared during normal vulnerability maintenance. Mitigation focus: Upgrade affected Linux kernels to versions containing the upstream eql.c initialization fix.; Check Red Hat, Ubuntu, SUSE, or Mandriva advisories for matching fixed package versions.; Retire or isolate obsolete Linux 2.6-era systems where vendor updates are unavailable..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.