The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.00098
Percentile: 0.28249

CVSS Scoring

Mapped CWE(s)

• CWE-476 : NULL Pointer Dereference
• CWE-908 : Use of Uninitialized Resource

Affected Products

• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
• cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:mrg_realtime:1.0:*:*:*:*:*:*:*
• cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*
• cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp3:*:*:*:*:*:*
• cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*
• cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*
• cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*
• cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*
• cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:-:*:*:*
• cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:*

← Back to Home