CVE - CVE-2010-1446

CVE-ID
CVE-2010-1446	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
arch/powerpc/mm/fsl_booke_mmu.c in KGDB in the Linux kernel 2.6.30 and other versions before 2.6.33, when running on PowerPC, does not properly perform a security check for access to a kernel page, which allows local users to overwrite arbitrary kernel memory, related to Fsl booke.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:39830 URL:http://secunia.com/advisories/39830 MISC:40645 URL:http://secunia.com/advisories/40645 MISC:ADV-2010-1857 URL:~~http://www.vupen.com/english/advisories/2010/1857~~ (Obsolete source) MISC:DSA-2053 URL:http://www.debian.org/security/2010/dsa-2053 MISC:SUSE-SA:2010:031 URL:http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html MISC:[linux-kernel] 20100510 [071/117] kgdb: dont needlessly skip PAGE_USER test for Fsl booke URL:http://lkml.org/lkml/2010/5/10/458 MISC:[oss-security] 20100429 CVE request - Linux Kernel KGDB/ppc issue URL:http://www.openwall.com/lists/oss-security/2010/04/29/3 MISC:[oss-security] 20100429 Re: CVE request - Linux Kernel KGDB/ppc issue URL:http://www.openwall.com/lists/oss-security/2010/04/29/9 MISC:[oss-security] 20100430 Re: CVE request - Linux Kernel KGDB/ppc issue URL:http://www.openwall.com/lists/oss-security/2010/04/30/1 MISC:kernel-kgdb-memory-overwrite(58840) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/58840
Assigning CNA
Red Hat, Inc.
Date Record Created
20100415	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100415)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)