CVE-2010-3298: The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly...

Security readout for executives and security teams

CVE-2010-3298 is an old Linux kernel information disclosure flaw. A local user could cause the hso USB network driver to return data from kernel stack memory. This is not described as remote code execution, but leaked kernel memory can weaken host confidentiality and support other attacks. Exposure is most plausible on legacy Linux systems running kernels before 2.6.36-rc5, especially where vendor kernels had not received the referenced Ubuntu, Red Hat, or SUSE updates. The source bundle does not identify specific CPEs or modern affected products. Treat this as a legacy kernel hygiene issue unless vulnerable multi-user Linux hosts remain in service. It warrants remediation in normal patch cycles, with higher urgency for shared systems where local users are not fully trusted. Mitigation focus: Update affected Linux kernels using vendor security advisories or later fixed kernel releases.; For custom kernels, compare hso.c against the upstream fix before deployment.; Prioritize legacy systems with local multi-user access or untrusted shell users..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.