PT-2019-6599 · Linux · Linux Kernel

Dhananjay Arunesh · Published 2019-07-27 · Updated 2024-08-07 · CVE-2010-5331

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.34

Description A range check issue in drivers/gpu/drm/radeon/atombios.c could cause an off by one (buffer overflow) problem. The issue is disputed by at least one Linux maintainer, who believes it should be rejected because the value is hard coded and not user-controllable where it is used.

Recommendations For Linux kernel versions prior to 2.6.34, update to version 2.6.34 or later to resolve the issue. As a temporary workaround, consider restricting access to the atombios.c module to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-193

Related Identifiers

CVE-2010-5331

Affected Products

Linux Kernel

References · 11

• https://github.com/torvalds/linux/commit/0031c41be5c529f8329e327b63cde92ba1284842 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2010-5331 · Vendor Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0031c41be5c529f8329e327b63cde92ba1284842 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-5331 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2010-5331 · Security Note
• https://ubuntu.com/security/CVE-2010-5331 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2010-5331 · Security Note
• https://t.me/cibsecurity/5757 · Telegram Post
• https://git.kernel.org/linus/0031c41be5c529f8329e327b63cde92ba1284842 · Note
• https://support.f5.com/csp/article/K33183814?utm_source=f5support&amp%3Butm_medium=RSS · Note
• https://mirrors.edge.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 · Note