Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-1747
HistoryMay 09, 2011 - 12:00 a.m.

CVE-2011-1747

2011-05-0900:00:00
ubuntu.com
ubuntu.com
8

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.2%

The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not
properly restrict memory allocation by the (1) AGPIOC_RESERVE and (2)
AGPIOC_ALLOCATE ioctls, which allows local users to cause a denial of
service (memory consumption) by making many calls to these ioctls.

Bugs

Notes

Author Note
kees no upstream fix yet
apw below is a partial fix, complete fix still remains break-fix: - b522f02184b413955f3bc952e3776ce41edc6355
mdeslaur CAP_SYS_RAWIO is needed to exploit this, so is not security relevant. Ignoring.

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.2%