CVE-2011-1016

The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
1.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:N/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
VendorProductVersion
linuxlinux_kernel
𝑥
< 2.6.38
linuxlinux_kernel
2.6.38
linuxlinux_kernel
2.6.38:rc1
linuxlinux_kernel
2.6.38:rc2
linuxlinux_kernel
2.6.38:rc3
linuxlinux_kernel
2.6.38:rc4
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
natty
Fixed 2.6.38-6.33
released
maverick
Fixed 2.6.35-29.51
released
lucid
Fixed 2.6.32-32.62
released
karmic
not-affected
hardy
not-affected
dapper
dne
linux-ec2
natty
dne
maverick
ignored
lucid
Fixed 2.6.32-316.30
released
karmic
ignored
hardy
dne
dapper
dne
linux-fsl-imx51
natty
dne
maverick
dne
lucid
not-affected
karmic
ignored
hardy
dne
dapper
dne
linux-lts-backport-maverick
natty
dne
maverick
dne
lucid
Fixed 2.6.35-30.54~lucid1
released
karmic
dne
hardy
dne
dapper
dne
linux-lts-backport-natty
natty
dne
maverick
dne
lucid
not-affected
hardy
dne
linux-mvl-dove
natty
dne
maverick
Fixed 2.6.32-417.34
released
lucid
Fixed 2.6.32-217.34
released
karmic
ignored
hardy
dne
dapper
dne
linux-source-2.6.15
natty
dne
maverick
dne
lucid
dne
karmic
dne
hardy
dne
dapper
not-affected
linux-ti-omap4
natty
Fixed 2.6.38-1204.5
released
maverick
Fixed 2.6.35-903.23
released
lucid
dne
karmic
dne
hardy
dne
dapper
dne
Common Weakness Enumeration
References
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
http://openwall.com/lists/oss-security/2011/02/24/11
http://openwall.com/lists/oss-security/2011/02/24/3
http://openwall.com/lists/oss-security/2011/02/25/4
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5
http://www.securityfocus.com/bid/46557
https://bugzilla.redhat.com/show_bug.cgi?id=680000
https://exchange.xforce.ibmcloud.com/vulnerabilities/65691
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
http://openwall.com/lists/oss-security/2011/02/24/11
http://openwall.com/lists/oss-security/2011/02/24/3
http://openwall.com/lists/oss-security/2011/02/25/4
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5
http://www.securityfocus.com/bid/46557
https://bugzilla.redhat.com/show_bug.cgi?id=680000
https://exchange.xforce.ibmcloud.com/vulnerabilities/65691