CVE-2010-2803

Low

Low Medium High Critical

CVSS Score

Published: Sep 08, 2010

Last Modified: Apr 11, 2025

Vulnerability Description

The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount.

Known Affected Software

7 configuration(s) from 3 vendor(s)

debian_linux

Version:

5.0

CPE:

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

opensuse

Version:

11.3

CPE:

cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*

opensuse

Version:

11.1

CPE:

cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*

linux_enterprise_real_time

Version:

CPE:

cpe:2.3:o:suse:linux_enterprise_real_time:11:sp1:*:*:*:*:*:*

linux_enterprise_high_availability_extension

Version:

CPE:

cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:-:*:*:*:*:*:*

linux_enterprise_server

Version:

CPE:

cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:-:*:*:*

linux_enterprise_desktop

Version:

CPE:

cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*

This vulnerability affects 7 software configuration(s). Ensure you patch all affected systems.

References & Resources

Severity Details

out of 10.0

Low

Weakness Type (CWE)

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Description: The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Exploit Likelihood: High
Typical Severity: Medium
Abstraction Level: Class