Linux Kernel DRM IOCTL Functions Unspecified Privilege Escalation Vulnerability

Bugtraq ID:	13905
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Jun 09 2005 12:00AM
Updated:	Jun 09 2005 12:00AM
Credit:	This issue was reported by SUSE.
Vulnerable:	SuSE Linux Enterprise Server 9 S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 Linux kernel 2.6.11 + Redhat Fedora Core4 Linux kernel 2.6.8 + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32 Linux kernel 2.6.5 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.1 + SuSE Linux Enterprise Server 9
Not Vulnerable:

Linux Kernel DRM IOCTL Functions Unspecified Privilege Escalation Vulnerability

The Linux kernel is affected by an unspecified privilege escalation vulnerability.

Reports indicate that some unspecified DRM ioctl functions can allow local attackers to gain elevated privileges due to insufficient checks.

This BID will be updated when more information is available.

Linux Kernel DRM IOCTL Functions Unspecified Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Linux Kernel DRM IOCTL Functions Unspecified Privilege Escalation Vulnerability

Solution:
SUSE has released advisory SUSE-SA:2005:029 to address this and other issues. Please see the referenced advisory for more information.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Linux Kernel DRM IOCTL Functions Unspecified Privilege Escalation Vulnerability

References:

• kernel.org Homepage. (Linux Kernel)