NetSight
IP …
low1.9

CVE-2010-2803

The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.3…

Impact

The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.27.53
from 2.6.32 before 2.6.32.21
from 2.6.34 before 2.6.34.6
from 2.6.35 before 2.6.35.4
DebianDebian Linux
Version 5.0
OpensuseOpensuse
Versions 11.1, 11.3
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise High Availability Extension
Version 11
SuseLinux Enterprise Real Time
Version 11
SuseLinux Enterprise Server
Version 11

Weakness classification

CWE-200

References