The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2009-10-22 09:00
Updated : 2023-02-12 18:20
NVD link : CVE-2009-3620
Mitre link : CVE-2009-3620
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
linux
- linux_kernel