PT-2011-2816 · Linux+1 · Linux Kernel+1

Eugene Teo · CVE-2011-1016 · Publicado 2011-02-28 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38-rc5

Description The issue concerns the Radeon GPU drivers in the Linux kernel, which fail to properly validate data related to the AA resolve registers. This allows local users to write to arbitrary memory locations, specifically those associated with Video RAM (VRAM) or the Graphics Translation Table (GTT), by using crafted values.

Recommendations For Linux kernel versions prior to 2.6.38-rc5, update to version 2.6.38-rc5 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-1016

DSA-2240-1

RHSA-2011:0498

RHSA-2011_0498

Produtos afetados

Linux Kernel

Red Hat

Referências · 32

• https://github.com/torvalds/linux/commit/8909c9ad8ff03611c9c96c9a92656213e4bb495b · Nota
• https://access.redhat.com/security/cve/CVE-2011-1079 · Nota
• http://spinics.net/lists/netdev/msg145791.html · Nota
• https://bdu.fstec.ru/vul/2015-04607 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2011-1016 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2011:0498 · Nota
• http://openwall.com/lists/oss-security/2011/02/25/4 · Correção
• https://bugzilla.redhat.com/show_bug.cgi?id=695383 · Nota
• http://securityfocus.com/bid/46557 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4649 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=680000 · Correção
• https://access.redhat.com/security/cve/CVE-2010-4565 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1044 · Nota
• http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5 · Nota
• https://access.redhat.com/security/cve/CVE-2011-0711 · Nota