CVE-2010-2803

Published: Sep 8, 2010Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount.

Affected (11)

Products: Linux: Linux Kernel · Debian: Debian Linux · Opensuse: Opensuse · +1 more

Show all products

Linux: Linux Kernel · Debian: Debian Linux · Opensuse: Opensuse · Suse: Linux Enterprise Desktop, Linux Enterprise High Availability Extension, Linux Enterprise Real Time, Linux Enterprise Server

1 product

1 product

1 product

4 products

Linux Enterprise Desktop

Linux Enterprise High Availability Extension

Linux Enterprise Real Time

Linux Enterprise Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.27.53
Linux Linux Kernel	From 2.6.32 to 2.6.32.21
Linux Linux Kernel	From 2.6.34 to 2.6.34.6
Linux Linux Kernel	From 2.6.35 to 2.6.35.4

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 5.0

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.1
Opensuse Opensuse	Version 11.3
Suse Linux Enterprise Desktop	Version 11 sp1
Suse Linux Enterprise High Availability Extension	Version 11 sp1
Suse Linux Enterprise Real Time	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp1

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (36)

http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/41512

Source: secalert@redhat.com

Broken Link

http://www.debian.org/security/2010/dsa-2094

Source: secalert@redhat.com

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53

Source: secalert@redhat.com

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21

Source: secalert@redhat.com

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6

Source: secalert@redhat.com

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2010:198

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2010-0842.html

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/2430

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2011/0298

Source: secalert@redhat.com

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=621435

Source: secalert@redhat.com

ExploitIssue TrackingPatchThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://secunia.com/advisories/41512

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.debian.org/security/2010/dsa-2094

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2010:198

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.redhat.com/support/errata/RHSA-2010-0842.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.vupen.com/english/advisories/2010/2430

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.vupen.com/english/advisories/2011/0298

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=621435

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchThird Party Advisory

Timeline

No history available yet.