CVE-2010-4158: The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether...

Security readout for executives and security teams

CVE-2010-4158 is a Linux kernel information-disclosure flaw. A local user could cause socket filter handling to read uninitialized kernel stack memory and potentially expose sensitive data. The issue is old, fixed upstream before Linux 2.6.36.2, and appears mainly relevant to legacy systems. Exposure is most likely on legacy Linux systems running kernels before 2.6.36.2 or vendor kernels covered by SUSE, Red Hat, Fedora, or related advisories. Modern maintained distributions are unlikely to remain affected unless running obsolete or custom kernels. Treat this as a legacy hygiene issue unless obsolete kernels remain in production. It requires local access and is not listed as known exploited, but kernel memory disclosure can matter on shared systems or environments with untrusted users. Mitigation focus: Apply vendor kernel security updates that include the CVE-2010-4158 fix.; Upgrade kernels older than Linux 2.6.36.2 where still present.; Retire unsupported legacy Linux hosts where vendor fixes are unavailable..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.