PT-2011-2816 · Linux+1 · Linux Kernel+1

Eugene Teo · Published 2011-02-28 · Updated 2023-02-13 · CVE-2011-1016

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38-rc5

Description The issue concerns the Radeon GPU drivers in the Linux kernel, which fail to properly validate data related to the AA resolve registers. This allows local users to write to arbitrary memory locations, specifically those associated with Video RAM (VRAM) or the Graphics Translation Table (GTT), by using crafted values.

Recommendations For Linux kernel versions prior to 2.6.38-rc5, update to version 2.6.38-rc5 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-1016

DSA-2240-1

RHSA-2011:0498

RHSA-2011_0498

Affected Products

Linux Kernel

Red Hat

References · 32

• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-1016 · Security Note
• http://openwall.com/lists/oss-security/2011/02/25/4 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=680000 · Patch
• http://openwall.com/lists/oss-security/2011/02/24/11 · Patch
• https://linux.oracle.com/errata/ELSA-2011-0498.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-2015.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/02/24/3 · Patch
• https://github.com/torvalds/linux/commit/8909c9ad8ff03611c9c96c9a92656213e4bb495b · Note
• https://access.redhat.com/security/cve/CVE-2011-1079 · Note
• http://spinics.net/lists/netdev/msg145791.html · Note
• https://access.redhat.com/errata/RHSA-2011:0498 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=695383 · Note
• http://securityfocus.com/bid/46557 · Note
• https://access.redhat.com/security/cve/CVE-2010-4649 · Note