NVD

Id
14393  
Name
CVE-2010-2962  
Description
drivers/gpu/drm/i915/i915_gem.c in the Graphics Execution Manager (GEM) in the Intel i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.36 does not properly validate pointers to blocks of memory, which allows local users to write to arbitrary kernel memory locations, and consequently gain privileges, via crafted use of the ioctl interface, related to (1) pwrite and (2) pread operations.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-11-26  
Modified Date
2012-03-19  
Seq
2010-2962  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79734 14393 CVE-2010-2962 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ce9d419dbecc292cc3e06e8b1d6d123d3fa813a4  View
79735 14393 CVE-2010-2962 FEDORA-2010-18983  View
79736 14393 CVE-2010-2962 SUSE-SA:2010:050  View
79737 14393 CVE-2010-2962 SUSE-SA:2010:051  View
79738 14393 CVE-2010-2962 SUSE-SA:2011:007  View
79739 14393 CVE-2010-2962 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36  View
79740 14393 CVE-2010-2962 RHSA-2010:0842  View
79741 14393 CVE-2010-2962 RHSA-2010:0958  View
79742 14393 CVE-2010-2962 44067  View
79743 14393 CVE-2010-2962 USN-1041-1  View
79744 14393 CVE-2010-2962 ADV-2010-3321  View
79745 14393 CVE-2010-2962 ADV-2011-0070  View
79746 14393 CVE-2010-2962 ADV-2011-0298  View
79747 14393 CVE-2010-2962 https://bugzilla.redhat.com/show_bug.cgi?id=637688  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36695 JVNDB-2010-002475 Linux kernel の Direct Rendering Manager サブシステムの Intel i915 ドライバにおける権限昇格の脆弱性 Linux kernel の Direct Rendering Manager (DRM) サブシステムの Intel i915 ドライバ内にある Graphics Execution Manager (GEM) の drivers/gpu/drm/i915/i915_gem.c には、 pwrite および pread のオペレーションに関する処理に不備があり、メモリブロックへのポインタを適切に検証しないため、脆弱性が存在します。 CVE-2010-2962 45542 CVE-2010-2962 14393 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002475.html 2010-10-20 2011-04-07 View