CVE-2009-3620

HIGH

Linux Kernel < 2.6.31.1 - Use of Uninitialized Resource

Title source: rule

Description

The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.

References (27)

[Broken Link] http://article.gmane.org/gmane.linux.kernel/892259

[Broken Link] http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7dc482dfeeeefcfd000d4271c4626937406756d7

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html

[Broken Link] http://lists.vmware.com/pipermail/security-announce/2010/000082.html

[Broken Link, Vendor Advisory] http://secunia.com/advisories/36707

[Broken Link] http://secunia.com/advisories/37909

[Broken Link] http://secunia.com/advisories/38794

[Broken Link] http://secunia.com/advisories/38834

[Broken Link, Patch] http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.31-git11.log

[Broken Link] http://www.mandriva.com/security/advisories?name=MDVSA-2010:088

[Broken Link] http://www.mandriva.com/security/advisories?name=MDVSA-2010:198

[Mailing List, Patch] http://www.openwall.com/lists/oss-security/2009/10/19/1

[Mailing List, Patch] http://www.openwall.com/lists/oss-security/2009/10/19/3

[Broken Link] http://www.redhat.com/support/errata/RHSA-2009-1670.html

[Broken Link] http://www.redhat.com/support/errata/RHSA-2009-1671.html

[Broken Link] http://www.redhat.com/support/errata/RHSA-2010-0882.html

[Broken Link, Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/36824

... and 7 more

Scores

CVSS v3 7.8

EPSS 0.0007

EPSS Percentile 21.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-476 CWE-908

Status draft

Affected Products (16)

linux/linux_kernel < 2.6.31.1

fedoraproject/fedora

canonical/ubuntu_linux

canonical/ubuntu_linux

canonical/ubuntu_linux

canonical/ubuntu_linux

canonical/ubuntu_linux

redhat/mrg_realtime

suse/linux_enterprise_debuginfo

suse/linux_enterprise_debuginfo

opensuse/opensuse

suse/linux_enterprise_desktop

suse/linux_enterprise_desktop

suse/linux_enterprise_server

suse/linux_enterprise_server

... and 1 more

Timeline

Published Oct 22, 2009

Tracked Since Feb 18, 2026