Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:L/AC:M/Au:N/C:N/I:N/A:C)
Производитель ПО
Наименование ПО
Linux Kernel
(Unknown)
Описание
Драйвер i915 в drivers/char/drm/i915_dma.c в Linux kernel и sys/dev/pci/drm/i915_drv.c в OpenBSD не ограничивает доступ к DRM_I915_HWS_ADDR ioctl так, чтобы только управляющий модуль Direct Rendering Manager (DRM) мог получить его, что позволяет локальным пользователям вызвать отказ в обслуживании (чрезмерное потребление ресурсов памяти), используя специально сформированный вызов ioctl. Данная уязвимость связана с тем, что флаги DRM_MASTER и DRM_ROOT_ONLY отсутствуют в конфигурации ioctl.
Как исправить
Для устранения уязвимости необходимо установить последнюю версию продукта, соответствующую используемой платформе. Необходимую информацию можно получить по адресу:
http://www.kernel.org/
http://www.kernel.org/
Ссылки
BID (31792): http://www.securityfocus.com/bid/31792
CONFIRM (http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c): http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c
FEDORA (FEDORA-2008-8929): https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html
FEDORA (FEDORA-2008-8980): https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html
UBUNTU (USN-679-1): http://www.ubuntu.com/usn/usn-679-1
UBUNTU (USN-659-1): http://www.ubuntu.com/usn/usn-659-1
BUGTRAQ (20081112 rPSA-2008-0316-1 kernel): http://www.securityfocus.com/archive/1/archive/1/498285/100/0/threaded
REDHAT (RHSA-2009:0009): http://www.redhat.com/support/errata/RHSA-2009-0009.html
REDHAT (RHSA-2008:1017): http://www.redhat.com/support/errata/RHSA-2008-1017.html
CONFIRM (http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c.diff?r1=1.7;r2=1.8): http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c.diff?r1=1.7;r2=1.8
MANDRIVA (MDVSA-2008:224): http://www.mandriva.com/security/advisories?name=MDVSA-2008:224
DEBIAN (DSA-1655): http://www.debian.org/security/2008/dsa-1655
CONFIRM (http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0316): http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0316
CONFIRM (http://wiki.rpath.com/Advisories:rPSA-2008-0316): http://wiki.rpath.com/Advisories:rPSA-2008-0316
SUNALERT (245846): http://sunsolve.sun.com/search/document.do?assetkey=1-26-245846-1
SECTRACK (1021065): http://securitytracker.com/id?1021065
CONFIRM (http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-2.6.24_2.6.24-6~etchnhalf.6.diff.gz): http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-2.6.24_2.6.24-6~etchnhalf.6.diff.gz
MLIST ([source-changes] 20081017 CVS: cvs.openbsd.org: src): http://archives.neohapsis.com/archives/openbsd/cvs/2008-10/0365.html
CONFIRM (http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c): http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c
FEDORA (FEDORA-2008-8929): https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html
FEDORA (FEDORA-2008-8980): https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html
UBUNTU (USN-679-1): http://www.ubuntu.com/usn/usn-679-1
UBUNTU (USN-659-1): http://www.ubuntu.com/usn/usn-659-1
BUGTRAQ (20081112 rPSA-2008-0316-1 kernel): http://www.securityfocus.com/archive/1/archive/1/498285/100/0/threaded
REDHAT (RHSA-2009:0009): http://www.redhat.com/support/errata/RHSA-2009-0009.html
REDHAT (RHSA-2008:1017): http://www.redhat.com/support/errata/RHSA-2008-1017.html
CONFIRM (http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c.diff?r1=1.7;r2=1.8): http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c.diff?r1=1.7;r2=1.8
MANDRIVA (MDVSA-2008:224): http://www.mandriva.com/security/advisories?name=MDVSA-2008:224
DEBIAN (DSA-1655): http://www.debian.org/security/2008/dsa-1655
CONFIRM (http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0316): http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0316
CONFIRM (http://wiki.rpath.com/Advisories:rPSA-2008-0316): http://wiki.rpath.com/Advisories:rPSA-2008-0316
SUNALERT (245846): http://sunsolve.sun.com/search/document.do?assetkey=1-26-245846-1
SECTRACK (1021065): http://securitytracker.com/id?1021065
CONFIRM (http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-2.6.24_2.6.24-6~etchnhalf.6.diff.gz): http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-2.6.24_2.6.24-6~etchnhalf.6.diff.gz
MLIST ([source-changes] 20081017 CVS: cvs.openbsd.org: src): http://archives.neohapsis.com/archives/openbsd/cvs/2008-10/0365.html
