4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.2%
The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not
properly restrict memory allocation by the (1) AGPIOC_RESERVE and (2)
AGPIOC_ALLOCATE ioctls, which allows local users to cause a denial of
service (memory consumption) by making many calls to these ioctls.
Author | Note |
---|---|
kees | no upstream fix yet |
apw | below is a partial fix, complete fix still remains break-fix: - b522f02184b413955f3bc952e3776ce41edc6355 |
mdeslaur | CAP_SYS_RAWIO is needed to exploit this, so is not security relevant. Ignoring. |