Veracode Vulnerability DatabaseVERACODE:24658Denial Of Service (DoS)
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
Kernel is vulnerable to denial of service (DoS). The Radeon GPU drivers in the Linux kernel were missing sanity checks for the Anti Aliasing (AA) resolve register values which could allow a local, unprivileged user to cause a denial of service or escalate their privileges on systems using a graphics card from the ATI Radeon R300, R400, or R500 family of cards.
References
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Technical_Notes/ape.html#RHSA-2011-0498
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
openwall.com/lists/oss-security/2011/02/24/11
openwall.com/lists/oss-security/2011/02/24/3
openwall.com/lists/oss-security/2011/02/25/4
www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5
www.securityfocus.com/bid/46557
access.redhat.com/errata/RHSA-2011:0498
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=680000
exchange.xforce.ibmcloud.com/vulnerabilities/65691
Related
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N