製品・ソフトウェアに関する情報

JVN脆弱性詳細

Linux kernel の Radeon GPU ドライバにおける任意のメモリロケーションへ書き込みされる脆弱性

Title	Linux kernel の Radeon GPU ドライバにおける任意のメモリロケーションへ書き込みされる脆弱性
Summary	Linux kernel の Radeon GPU ドライバは、Anti Aliasing (AA) を処理するレジスタ値のデータを適切に検証しないため、Video RAM (VRAM) または Graphics Translation Table (GTT) に関連する任意のメモリロケーションへ書き込みされる脆弱性が存在します。
Possible impacts	ローカルユーザにより、巧妙に細工された値を介して、Video RAM (VRAM) または Graphics Translation Table (GTT) に関連する任意のメモリロケーションへ書き込みされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 28, 2011, midnight
Registration Date	May 26, 2011, 10:45 a.m.
Last Update	May 26, 2011, 10:45 a.m.

Affected System

レッドハット

Red Hat Enterprise Linux Desktop 6

Red Hat Enterprise Linux HPC Node 6

Red Hat Enterprise Linux Server 6

Red Hat Enterprise Linux Server EUS 6.0.z

Red Hat Enterprise Linux Workstation 6

Linux

Linux Kernel 2.6.38 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-1016	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1016
National Vulnerability Database (NVD)
2	CVE-2011-1016	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1016

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
Linux Kernel
1	ChangeLog-2.6.38	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
2	Linux Kernel Archives	http://www.kernel.org
Red Hat Security Advisory
3	RHSA-2011:0498	https://rhn.redhat.com/errata/RHSA-2011-0498.html

その他

No	Name	URL
ISS X-Force Database
1	65691	http://xforce.iss.net/xforce/xfdb/65691
SecurityFocus
2	46557	http://www.securityfocus.com/bid/46557

Change Log

No	Changed Details	Date of change
0	[2011年05月26日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2011-1016

Summary	The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values.
Publication Date	March 1, 2011, 1 a.m.
Registration Date	Jan. 28, 2021, 4:38 p.m.
Last Update	Nov. 21, 2024, 10:25 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
2	http://openwall.com/lists/oss-security/2011/02/24/11	Mailing List Patch Third Party Advisory
3	http://openwall.com/lists/oss-security/2011/02/24/3	Mailing List Patch Third Party Advisory
4	http://openwall.com/lists/oss-security/2011/02/25/4	Mailing List Patch Third Party Advisory
5	http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5	Broken Link
6	http://www.securityfocus.com/bid/46557	Third Party Advisory VDB Entry
7	https://bugzilla.redhat.com/show_bug.cgi?id=680000	Issue Tracking Patch Third Party Advisory
8	https://exchange.xforce.ibmcloud.com/vulnerabilities/65691	Third Party Advisory VDB Entry
9	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
10	https://exchange.xforce.ibmcloud.com/vulnerabilities/65691	Third Party Advisory VDB Entry
11	https://bugzilla.redhat.com/show_bug.cgi?id=680000	Issue Tracking Patch Third Party Advisory
12	http://www.securityfocus.com/bid/46557	Third Party Advisory VDB Entry
13	http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5	Broken Link
14	http://openwall.com/lists/oss-security/2011/02/25/4	Mailing List Patch Third Party Advisory
15	http://openwall.com/lists/oss-security/2011/02/24/3	Mailing List Patch Third Party Advisory
16	http://openwall.com/lists/oss-security/2011/02/24/11	Mailing List Patch Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html