CVE-2011-1016

Linux Kernel < 2.6.38 - Arbitrary Memory Write via Radeon GPU AA Resolve Registers

Title source: llm
STIX 2.1

Description

The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values.

References (8)

Core 8
Core References
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/02/24/3
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/65691
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/02/24/11
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=680000
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/02/25/4
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/46557

Scores

EPSS 0.0034
EPSS Percentile 26.3%

Details

CWE
CWE-20
Status published
Products (2)
linux/linux_kernel 2.6.38 (5 CPE variants)
linux/linux_kernel < 2.6.38
Published Feb 28, 2011
Tracked Since Feb 18, 2026