CVE-2011-2022

Publication date 9 May 2011

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl ioctl call, a different vulnerability than CVE-2011-1745.

From the Ubuntu Security Team

Vasiliy Kulikov discovered that the AGP driver did not check certain ioctl values. A local attacker with access to the video subsystem could exploit this to crash the system, leading to a denial of service, or possibly gain root privileges.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
linux 11.04 natty
Fixed 2.6.38-10.44
10.10 maverick
Fixed 2.6.35-30.52
10.04 LTS lucid
Fixed 2.6.32-33.64
8.04 LTS hardy
Fixed 2.6.24-29.91
6.06 LTS dapper Not in release
linux-ec2 11.04 natty Not in release
10.10 maverick Ignored end of life
10.04 LTS lucid
Fixed 2.6.32-317.32
8.04 LTS hardy Not in release
6.06 LTS dapper Not in release
linux-fsl-imx51 11.04 natty Not in release
10.10 maverick Not in release
10.04 LTS lucid
Fixed 2.6.31-609.26
8.04 LTS hardy Not in release
6.06 LTS dapper Not in release
linux-lts-backport-maverick 11.04 natty Not in release
10.10 maverick Not in release
10.04 LTS lucid
Fixed 2.6.35-30.54~lucid1
8.04 LTS hardy Not in release
6.06 LTS dapper Not in release
linux-lts-backport-natty 11.04 natty Not in release
10.10 maverick Not in release
10.04 LTS lucid
Not affected
8.04 LTS hardy Not in release
linux-mvl-dove 11.04 natty Not in release
10.10 maverick
Fixed 2.6.32-417.34
10.04 LTS lucid
Fixed 2.6.32-217.34
8.04 LTS hardy Not in release
6.06 LTS dapper Not in release
linux-source-2.6.15 11.04 natty Not in release
10.10 maverick Not in release
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release
6.06 LTS dapper Ignored
linux-ti-omap4 11.04 natty
Fixed 2.6.38-1209.15
10.10 maverick
Fixed 2.6.35-903.23
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release
6.06 LTS dapper Not in release

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
linux

References

Related Ubuntu Security Notices (USN)

    • USN-1164-1
    • Linux kernel vulnerabilities (i.MX51)
    • 6 July 2011
    • USN-1202-1
    • Linux kernel (OMAP4) vulnerabilities
    • 13 September 2011
    • USN-1160-1
    • Linux kernel vulnerabilities
    • 28 June 2011
    • USN-1170-1
    • Linux kernel vulnerabilities
    • 15 July 2011
    • USN-1168-1
    • Linux kernel vulnerabilities
    • 15 July 2011
    • USN-1162-1
    • Linux kernel vulnerabilities (Marvell Dove)
    • 29 June 2011
    • USN-1167-1
    • Linux kernel vulnerabilities
    • 13 July 2011
    • USN-1187-1
    • Linux kernel (Maverick backport) vulnerabilities
    • 9 August 2011
    • USN-1212-1
    • Linux kernel (OMAP4) vulnerabilities
    • 21 September 2011
    • USN-1161-1
    • Linux kernel vulnerabilities (EC2)
    • 13 July 2011
    • USN-1159-1
    • Linux kernel vulnerabilities (Marvell Dove)
    • 13 July 2011

Other references