Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2) sys/dev/pci/drm/drm_irq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and consequently cause a denial of service (system crash) or possibly have unspecified other impact, via a crafted num_crtcs (aka vb_num) structure member in an ioctl argument.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | May 9, 2011 |
| Suse | — | Upgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-pae-develUpgrade kernel-ec2-extraUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-docsUpgrade kernel-vanillaUpgrade kernel-desktopUpgrade kernel-desktop-baseUpgrade kernel-defaultUpgrade kernel-desktop-develUpgrade kernel-ec2-develUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kernel-ec2-baseUpgrade preload-kmp-defaultUpgrade kernel-ec2Upgrade kernel-vanilla-develUpgrade kernel-vmi-develUpgrade kernel-source-vanillaUpgrade kernel-vmi-baseUpgrade kernel-vanilla-baseUpgrade kernel-default-develUpgrade kernel-trace-baseUpgrade preload-kmp-desktopUpgrade kernel-traceUpgrade kernel-vmiUpgrade kernel-paeUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-debug-baseUpgrade kernel-source | Feb 17, 2015 | May 9, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-32-lpia | Nov 8, 2024 | May 9, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub