Description
Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm_vcpu_events->interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +14 | 2.6.32-71.14.1.el6 | RHSA-2011:0007 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Virtualization 5 | kvm +4 | 83-224.el5 | RHSA-2011:0028 |
Advisories 2
- RHSA-2011:0007 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2011:0028 Red Hat Security Advisory: kvm security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- kernel-kvmvcpueventsinterrupt-info-disc(64519) vdb-entry
- [oss-security] 20110105 Re: CVE-2010-4525 kvm: x86: zero kvm_vcpu_events->interrupt.pad infoleak mailing-list
- RHSA-2011:0007 vendor-advisory
- 70377 vdb-entry
- RHSA-2011:0028 vendor-advisory
- 45676 vdb-entry
- [oss-security] 20110105 CVE-2010-4525 kvm: x86: zero kvm_vcpu_events->interrupt.pad infoleak mailing-list
- [oss-security] 20110106 Re: CVE-2010-4525 kvm: x86: zero kvm_vcpu_events->interrupt.pad infoleak mailing-list
- 42890 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4525
- ADV-2011-0123 vdb-entry