CVE-2007-3851 – i965 DRM allows insecure packets

https://notcve.org/view.php?id=CVE-2007-3851

The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager (DRM) to write to arbitrary memory locations and gain privileges via a crafted batchbuffer. El componente drm/i915 en el núcleo Linux anterior a 2.6.22.2, cuando se usa con el conjunto de chips (chipset) i965G y posteriores, permite a usuarios locales con acceso a una sesión X11 y al Direct Rendering Manager (DRM) escribir a posiciones de memoria de su elección y obtener privilegios mediante un búfer de ejecución por lotes (batchbuffer) manipulado. • http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2 http://secunia.com/advisories/26389 http://secunia.com/advisories/26450 http://secunia.com/advisories/26500 http://secunia.com/advisories/26643 http://secunia.com/advisories/26664 http://secunia.com/advisories/26760 http://secunia.com/advisories/27227 http://www.debian.org/security/2007/dsa-1356 http://www.mandriva.com/security/advisories?name=MDVSA-2008:105 http://www.novell.com/linux/security/advisories/20 • CWE-399: Resource Management Errors •