drivers/platform/x86/thinkpad_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not properly restrict access to the video output control state, which allows local users to cause a denial of service (system hang) via a (1) read or (2) write operation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 3, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.31-22-generic | Nov 8, 2024 | Jan 3, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub