ByteOS Network

▼Common Vulnerabilities and Exposures (CVE)

Assigner:redhat

Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749

Published At:08 Sep, 2010 | 19:00

Updated At:07 Aug, 2024 | 02:46

▼CVE Numbering Authority (CNA)

The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html	vendor-advisory x_refsource_SUSE
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198	vendor-advisory x_refsource_MANDRIVA
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html	vendor-advisory x_refsource_SUSE
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2010/2430	vdb-entry x_refsource_VUPEN
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html	vendor-advisory x_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2010-0842.html	vendor-advisory x_refsource_REDHAT
http://www.vupen.com/english/advisories/2011/0298	vdb-entry x_refsource_VUPEN
http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05	x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4	x_refsource_CONFIRM
http://www.debian.org/security/2010/dsa-2094	vendor-advisory x_refsource_DEBIAN
https://bugzilla.redhat.com/show_bug.cgi?id=621435	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html	vendor-advisory x_refsource_SUSE
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21	x_refsource_CONFIRM
http://secunia.com/advisories/41512	third-party-advisory x_refsource_SECUNIA

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:198

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2010/2430

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0842.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.vupen.com/english/advisories/2011/0298

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.debian.org/security/2010/dsa-2094

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=621435

Resource:

x_refsource_CONFIRM

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/41512

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6	x_refsource_CONFIRM x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198	vendor-advisory x_refsource_MANDRIVA x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2010/2430	vdb-entry x_refsource_VUPEN x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.redhat.com/support/errata/RHSA-2010-0842.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.vupen.com/english/advisories/2011/0298	vdb-entry x_refsource_VUPEN x_transferred
http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05	x_refsource_CONFIRM x_transferred
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4	x_refsource_CONFIRM x_transferred
http://www.debian.org/security/2010/dsa-2094	vendor-advisory x_refsource_DEBIAN x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=621435	x_refsource_CONFIRM x_transferred
http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/41512	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:198

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/2430

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0842.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0298

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.debian.org/security/2010/dsa-2094

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=621435

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/41512

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert@redhat.com

Published At:08 Sep, 2010 | 20:00

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	1.9	LOW	AV:L/AC:M/Au:N/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 1.9

Base severity: LOW

Vector:

AV:L/AC:M/Au:N/C:P/I:N/A:N

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions before 2.6.27.53(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 2.6.32(inclusive) to 2.6.32.21(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 2.6.34(inclusive) to 2.6.34.6(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 2.6.35(inclusive) to 2.6.35.4(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>5.0

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

openSUSE

>>opensuse>>11.1

cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*

openSUSE

>>opensuse>>11.3

cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*

SUSE

>>linux_enterprise_desktop>>11

cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*

SUSE

>>linux_enterprise_high_availability_extension>>11

cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp1:*:*:*:*:*:*

SUSE

>>linux_enterprise_real_time>>11

cpe:2.3:o:suse:linux_enterprise_real_time:11:sp1:*:*:*:*:*:*

SUSE

>>linux_enterprise_server>>11

cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov

CWE ID: CWE-200

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05	secalert@redhat.com	N/A
http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd	secalert@redhat.com	N/A
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html	secalert@redhat.com	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html	secalert@redhat.com	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html	secalert@redhat.com	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html	secalert@redhat.com	Mailing List Third Party Advisory
http://secunia.com/advisories/41512	secalert@redhat.com	Broken Link
http://www.debian.org/security/2010/dsa-2094	secalert@redhat.com	Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53	secalert@redhat.com	Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21	secalert@redhat.com	Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6	secalert@redhat.com	Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4	secalert@redhat.com	Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198	secalert@redhat.com	Broken Link
http://www.redhat.com/support/errata/RHSA-2010-0842.html	secalert@redhat.com	Broken Link
http://www.vupen.com/english/advisories/2010/2430	secalert@redhat.com	Broken Link
http://www.vupen.com/english/advisories/2011/0298	secalert@redhat.com	Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=621435	secalert@redhat.com	Exploit Issue Tracking Patch Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05	af854a3a-2127-422b-91ae-364da2661108	N/A
http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd	af854a3a-2127-422b-91ae-364da2661108	N/A
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://secunia.com/advisories/41512	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.debian.org/security/2010/dsa-2094	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.redhat.com/support/errata/RHSA-2010-0842.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.vupen.com/english/advisories/2010/2430	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.vupen.com/english/advisories/2011/0298	af854a3a-2127-422b-91ae-364da2661108	Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=621435	af854a3a-2127-422b-91ae-364da2661108	Exploit Issue Tracking Patch Third Party Advisory

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html

Source: secalert@redhat.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html

Source: secalert@redhat.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html

Source: secalert@redhat.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

Source: secalert@redhat.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://secunia.com/advisories/41512

Source: secalert@redhat.com

Resource:

Broken Link

Hyperlink: http://www.debian.org/security/2010/dsa-2094

Source: secalert@redhat.com

Resource:

Third Party Advisory

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53

Source: secalert@redhat.com

Resource:

Broken Link

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21

Source: secalert@redhat.com

Resource:

Broken Link

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6

Source: secalert@redhat.com

Resource:

Broken Link

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4

Source: secalert@redhat.com

Resource:

Broken Link

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:198

Source: secalert@redhat.com

Resource:

Broken Link

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0842.html

Source: secalert@redhat.com

Resource:

Broken Link

Hyperlink: http://www.vupen.com/english/advisories/2010/2430

Source: secalert@redhat.com

Resource:

Broken Link

Hyperlink: http://www.vupen.com/english/advisories/2011/0298

Source: secalert@redhat.com

Resource:

Broken Link

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=621435

Source: secalert@redhat.com

Resource:

Exploit

Issue Tracking

Patch

Third Party Advisory

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05