CVE-2010-3477: The tcf_act_police_dump function in net/sched/act_police.c in the actions implementation in the network que...

Security readout for executives and security teams

CVE-2010-3477 is an old Linux kernel information disclosure issue. A local user could cause a network queueing dump operation to expose potentially sensitive kernel memory. It is not listed in KEV, and the provided sources do not show active exploitation. Exposure is most likely on legacy Linux systems or vendor kernels that include the vulnerable network scheduling police action code and have not received the vendor kernel updates referenced by Ubuntu, Red Hat, Debian, VMware, or upstream Linux. Handle during legacy Linux remediation cycles, with higher urgency for shared servers, virtualization hosts, and systems with untrusted local users. There is no sourced evidence of remote attack or active exploitation in the provided bundle. Mitigation focus: Apply the relevant vendor kernel update for affected Linux distributions or appliances.; Upgrade kernels containing the upstream fix before or at 2.6.36-rc4.; Prioritize shared systems where untrusted local users can access the host kernel..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.