Security Advisory
CVE-2010-3881
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.