CVE-2009-3620

Description

The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.

References

https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html

https://rhn.redhat.com/errata/RHSA-2009-1540.html

https://bugzilla.redhat.com/show_bug.cgi?id=529597

http://www.ubuntu.com/usn/usn-864-1

http://www.openwall.com/lists/oss-security/2009/10/19/3

http://www.openwall.com/lists/oss-security/2009/10/19/1

http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3