CVE-2010-5321

Published: 24 April 2017

Memory leak in drivers/media/video/videobuf-core.c in the videobuf subsystem in the Linux kernel 2.6.x through 4.x allows local users to cause a denial of service (memory consumption) by leveraging /dev/video access for a series of mmap calls that require new allocations, a different vulnerability than CVE-2007-6761. NOTE: as of 2016-06-18, this affects only 11 drivers that have not been updated to use videobuf2 instead of videobuf.

Notes

Author	Note
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
sbeattie	ignoring, as there are no details about what needs fixing, and it looks like major portions got rewritten in 2011, and has likely been addressed.

Author

Note

jdstrand

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.04 preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

sbeattie

ignoring, as there are no details about what needs fixing,
and it looks like major portions got rewritten in 2011, and has
likely been addressed.

Priority

Cvss 3 Severity Score

4.3

Score breakdown

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	lucid	Ignored (reached end-of-life)
	precise	Ignored
	trusty	Ignored
	upstream	Needs triage
	utopic	Ignored (reached end-of-life)
	vivid	Ignored (reached end-of-life)
	wily	Ignored
linux-armadaxp Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored
	trusty	Does not exist
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	This package is not directly supported by the Ubuntu Security Team
linux-ec2 Launchpad, Ubuntu, Debian	lucid	Ignored (reached end-of-life)
	precise	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-flo Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Ignored
	utopic	Ignored (reached end-of-life)
	vivid	Ignored (reached end-of-life)
	wily	Ignored
linux-fsl-imx51 Launchpad, Ubuntu, Debian	lucid	Ignored (reached end-of-life, does not affect buildd)
	precise	Does not exist
	trusty	Does not exist
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-goldfish Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Ignored
	utopic	Ignored (reached end-of-life)
	vivid	Ignored (reached end-of-life)
	wily	Ignored
linux-grouper Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Ignored
	utopic	Ignored (reached end-of-life)
	vivid	Does not exist
	wily	Does not exist
linux-linaro-omap Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored (abandoned)
	trusty	Does not exist
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-linaro-shared Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored (abandoned)
	trusty	Does not exist
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-linaro-vexpress Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored (abandoned)
	trusty	Does not exist
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-quantal Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored
	trusty	Does not exist
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	This package is not directly supported by the Ubuntu Security Team
linux-lts-raring Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored (was ignored now end-of-life)
	trusty	Does not exist
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-saucy Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored
	trusty	Does not exist
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	This package is not directly supported by the Ubuntu Security Team
linux-lts-trusty Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored
	trusty	Does not exist
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-utopic Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-vivid Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-wily Launchpad, Ubuntu, Debian	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Ignored
	vivid	Does not exist
	wily	Does not exist
linux-lts-xenial Launchpad, Ubuntu, Debian	precise	Does not exist
	trusty	Ignored
	upstream	Ignored
	vivid	Does not exist
	wily	Does not exist
linux-maguro Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-mako Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Ignored
	utopic	Ignored (reached end-of-life)
	vivid	Ignored (reached end-of-life)
	wily	Ignored
linux-manta Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Ignored
	utopic	Ignored (reached end-of-life)
	vivid	Ignored (reached end-of-life)
	wily	Ignored
linux-mvl-dove Launchpad, Ubuntu, Debian	lucid	Ignored (reached end-of-life)
	precise	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-qcm-msm Launchpad, Ubuntu, Debian	lucid	Ignored (abandoned)
	precise	Ignored (abandoned)
	trusty	Does not exist
	upstream	Ignored
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-raspi2 Launchpad, Ubuntu, Debian	precise	Does not exist
	trusty	Does not exist
	upstream	Ignored
	vivid	Does not exist
	wily	Ignored
linux-ti-omap4 Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored
	trusty	Does not exist
	upstream	Needs triage
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist

Severity score breakdown

Parameter	Value
Base score	4.3
Attack vector	Physical
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

Bugs

https://launchpad.net/bugs/1441303

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›