CVE-2009-3620

HIGH

Linux Kernel < 2.6.31-git11 - Denial of Service via ATI Rage 128 Driver ioctl Calls

Title source: llm
STIX 2.1

Description

The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.

References (27)

Core 27
Core References
Mailing List, Patch mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/10/19/3
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-1671.html
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/36824
Third Party Advisory vendor-advisory x_refsource_redhat
https://rhn.redhat.com/errata/RHSA-2009-1540.html
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=529597
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-864-1
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38794
Broken Link, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36707
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
Broken Link mailing-list x_refsource_mlist
http://article.gmane.org/gmane.linux.kernel/892259
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:088
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37909
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0882.html
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-1670.html
Mailing List, Patch mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/10/19/1
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38834
Mailing List, Release Notes vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0528

Scores

CVSS v3 7.8
EPSS 0.0009
EPSS Percentile 25.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-476 CWE-908
Status published
Products (13)
canonical/ubuntu_linux 6.06
canonical/ubuntu_linux 8.04
canonical/ubuntu_linux 8.10
canonical/ubuntu_linux 9.04
canonical/ubuntu_linux 9.10
fedoraproject/fedora 10
linux/linux_kernel < 2.6.31.1
opensuse/opensuse 11.0
redhat/mrg_realtime 1.0
suse/linux_enterprise_debuginfo 10 sp2 (2 CPE variants)
... and 3 more
Published Oct 22, 2009
Tracked Since Feb 18, 2026