CVE-2011-1016

Published: Feb 28, 2011Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values.

Affected (6)

Products: Linux: Linux Kernel

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.38
Linux Linux Kernel	Version 2.6.38
Linux Linux Kernel	Version 2.6.38 rc1
Linux Linux Kernel	Version 2.6.38 rc2
Linux Linux Kernel	Version 2.6.38 rc3
Linux Linux Kernel	Version 2.6.38 rc4

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (16)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/02/24/11

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://openwall.com/lists/oss-security/2011/02/24/3

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://openwall.com/lists/oss-security/2011/02/25/4

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/46557

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=680000

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/65691

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/02/24/11

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://openwall.com/lists/oss-security/2011/02/24/3

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://openwall.com/lists/oss-security/2011/02/25/4

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/46557

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=680000

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/65691

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.