drivers/platform/x86/thinkpad_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not properly restrict access to the video output control state, which allows local users to cause a denial of service (system hang) via a (1) read or (2) write operation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 3, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.31-22-sparc64-smp | Nov 8, 2024 | Jan 3, 2011 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub