PT-2011-1404 · Linux+2 · Linux Kernel+2

Eugene Teo + 1 · Published 2010-11-10 · Updated 2023-02-13 · CVE-2010-3448

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.34

Description The issue allows local users to cause a denial of service, resulting in a system hang, by performing a read or write operation on the video output control state. This is due to the lack of proper access restriction to the video output control state in the thinkpad acpi.c driver when the X.Org X server is used on ThinkPad devices.

Recommendations For Linux kernel versions prior to 2.6.34, update to version 2.6.34 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-3448

DSA-2126-1

RHSA-2010:0839

RHSA-2010_0839

Affected Products

Linux Kernel

Red Hat

X.Org Server

References · 25

• http://openwall.com/lists/oss-security/2010/09/30/1 · Patch
• https://bdu.fstec.ru/vul/2015-04590 · Security Note
• http://openwall.com/lists/oss-security/2010/09/30/6 · Patch
• https://bdu.fstec.ru/vul/2015-04589 · Security Note
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 · Vendor Advisory
• http://openwall.com/lists/oss-security/2010/09/28/1 · Patch
• https://bdu.fstec.ru/vul/2015-04609 · Security Note
• http://openwall.com/lists/oss-security/2010/09/29/7 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=652122 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2010-3448 · Security Note
• http://debian.org/security/2010/dsa-2126 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04610 · Security Note
• https://bdu.fstec.ru/vul/2015-05302 · Security Note
• http://openwall.com/lists/oss-security/2010/06/23/2 · Patch
• https://access.redhat.com/security/cve/CVE-2010-3078 · Note