CVE:CVE-2010-2963
CNNVD:CNNVD-201011-263
Linux Kernel 是开放源码操作系统Linux所使用的内核。
基于64位平台的Linux kernel 2.6.36之前版本中Video4Linux(V4L)实现中的drivers/media/video/v4l2-compat-ioctl32.c文件无法验证内存复制操作的目的位置。本地用户可以借助在/dev/video路径设备的VIDIOCSTUNER输入输出控制调用，以及之后对这个设备的VIDIOCSTUNER输入输出控制调用向任意内核内存地址写入数据，以及获得特权。
solution:Upgrade linux linux_kernel to a higher version than 2.6.36,and avoid the version (,2.6.36); Upgrade fedoraproject fedora to a higher version than 13,and avoid the version 13; Upgrade opensuse opensuse to a higher version than 11.2,11.3,and avoid the version 11.2,11.3; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade suse linux_enterprise_server to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade debian debian_linux to a higher version than 5.0,and avoid the version 5.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,9.04,9.10,10.04,10.10,and avoid the version 6.06,8.04,9.04,9.10,10.04,10.10