PT-2010-4437 · Linux+1 · Linux Kernel+1

Kees Cook · Published 2010-11-10 · Updated 2020-08-14 · CVE-2010-2962

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36

Description The issue is related to the Graphics Execution Manager (GEM) in the Intel i915 driver in the Direct Rendering Manager (DRM) subsystem. It does not properly validate pointers to blocks of memory, allowing local users to write to arbitrary kernel memory locations and gain privileges via crafted use of the ioctl interface, particularly with pwrite and pread operations.

Recommendations For Linux kernel versions prior to 2.6.36, update to version 2.6.36 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-2962

RHSA-2010:0842

RHSA-2010:0958

RHSA-2010_0842

Affected Products

Linux Kernel

Red Hat

References · 58

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_rds_page_copy_user_priv_esc.rb · Exploit
• https://linux.oracle.com/errata/ELSA-2011-0007.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04590 · Security Note
• https://bdu.fstec.ru/vul/2015-04609 · Security Note
• http://redhat.com/support/errata/RHSA-2010-0842.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06111 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-2962 · Security Note
• https://bdu.fstec.ru/vul/2015-06109 · Security Note
• https://bdu.fstec.ru/vul/2015-06110 · Security Note
• https://bdu.fstec.ru/vul/2015-06103 · Security Note
• http://ubuntu.com/usn/USN-1041-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3081 · Security Note
• https://bdu.fstec.ru/vul/2015-06106 · Security Note
• https://bdu.fstec.ru/vul/2015-04589 · Security Note