CVEvulnerability
CVE-2010-2803
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-09-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount.
Affected configurations
• linux linux kernel (< 2.6.27.53)
• linux linux kernel (>= 2.6.32 < 2.6.32.21)
• linux linux kernel (>= 2.6.34 < 2.6.34.6)
• linux linux kernel (>= 2.6.35 < 2.6.35.4)
• debian debian linux 5.0
• opensuse opensuse 11.1
• opensuse opensuse 11.3
• suse linux enterprise desktop 11
• suse linux enterprise high availability extension 11
• suse linux enterprise real time 11
• suse linux enterprise server 11
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05 git.kernel.org
- http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd git.kernel.org
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing List, Third Party Advisory
- http://secunia.com/advisories/41512 Broken Link
- http://www.debian.org/security/2010/dsa-2094 Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53 Broken Link
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21 Broken Link
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6 Broken Link
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4 Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 Broken Link
- http://www.redhat.com/support/errata/RHSA-2010-0842.html Broken Link
- http://www.vupen.com/english/advisories/2010/2430 Broken Link
- http://www.vupen.com/english/advisories/2011/0298 Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=621435 Exploit, Issue Tracking, Patch, Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05 git.kernel.org
- http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd git.kernel.org
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing List, Third Party Advisory
- http://secunia.com/advisories/41512 Broken Link
- http://www.debian.org/security/2010/dsa-2094 Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53 Broken Link
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21 Broken Link
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6 Broken Link
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4 Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 Broken Link
- http://www.redhat.com/support/errata/RHSA-2010-0842.html Broken Link
- http://www.vupen.com/english/advisories/2010/2430 Broken Link
- http://www.vupen.com/english/advisories/2011/0298 Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=621435 Exploit, Issue Tracking, Patch, Third Party Advisory