Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
Exploitability
AV:LAC:LAu:NImpact
C:PI:PA:P4.6/AV:L/AC:L/Au:N/C:P/I:P/A:P