Bug 386443

Summary:	Kernel: drm_iotcl() large memory allocation Information Disclosure (CVE-2010-2803)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	[linux < 2.6.27.53] [linux >= 2.6.32 < 2.6.32.21] [linux >= 2.6.34 < 2.6.34.6] [linux >= 2.6.35 < 2.6.35.4]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2011-10-08 17:44:24 UTC

CVE-2010-2803 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-2803):
  The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering
  Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x
  before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4
  allows local users to obtain potentially sensitive information from kernel
  memory by requesting a large memory-allocation amount.