CVE:CVE-2010-2962
CNNVD:CNNVD-201011-264
Linux Kernel 是开放源码操作系统Linux所使用的内核。
Linux kernel 2.6.36之前版本中的Direct Rendering Manager(DRM)子系统中的Intel i915驱动的Graphics Execution Manager(GEM)中的drivers/gpu/drm/i915/i915_gem.c文件不能正确验证内存块的指针。本地用户可以借助对特制输入输出控制接口的使用向任意内核地址写入数据，以及获取特权。该漏洞涉及(1)pwrite和(2)pread操作。
solution:Upgrade linux linux_kernel to a higher version than 2.6.36,and avoid the version (,2.6.36); Upgrade fedoraproject fedora to a higher version than 13,and avoid the version 13; Upgrade opensuse opensuse to a higher version than 11.3,and avoid the version 11.3; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade suse linux_enterprise_real_time_extension to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade suse linux_enterprise_server to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade canonical ubuntu_linux to a higher version than 9.10,10.04,10.10,and avoid the version 9.10,10.04,10.10