CVE Database
CVE-2009-3620
| Impact: | Moderate (classification) |
| Public: | August 30 2009 |
| Bugzilla: | 529597: CVE-2009-3620 kernel: r128 IOCTL NULL pointer dereferences when CCE state is uninitialised |
Details
The MITRE CVE dictionary describes this issue as:
The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.
Find out more about CVE-2009-3620 from the MITRE CVE dictionary and NIST NVD.
CVSS v2 metrics
| Base Score: | 4.9 | Base Metrics: | AV:L/AC:L/Au:N/C:N/I:N/A:C |
| Access Vector: | Local | Confidentiality Impact: | None |
| Access Complexity: | Low | Integrity Impact: | None |
| Authentication: | None | Availability Impact: | Complete |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat security errata
| Platform | Errata | Release Date |
| MRG Grid for RHEL 5 Server (kernel-rt) | RHSA-2009:1540 | November 03 2009 |
| Red Hat Enterprise Linux version 5 (kernel) | RHSA-2009:1670 | December 15 2009 |
| Red Hat Enterprise Linux version 4 (kernel) | RHSA-2009:1671 | December 15 2009 |
| Red Hat Enterprise Linux ES (v. 3 ELS) (kernel) | RHSA-2010:0882 | November 12 2010 |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Red Hat Security Response Team.
