CVE-2010-3448
kernel: thinkpad-acpi: lock down video output state access
Severity Score
4.9
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
drivers/platform/x86/thinkpad_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not properly restrict access to the video output control state, which allows local users to cause a denial of service (system hang) via a (1) read or (2) write operation.
drivers/platform/x86/thinkpad_acpi.c en el kernel de Linux anterior a v2.6.34 en los dispositivos de ThinkPad, cuando el servidor de X, X.Org, se utiliza, no restringe correctamente el acceso al estado del control de salida de vídeo, lo que permite a usuarios locales causar una denegación de servicio (caída del sistema) a través de operaciones de (1) lectura o (2) escritura.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-09-17 CVE Reserved
- 2010-11-29 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=565790 | Third Party Advisory | |
| http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b525c06cdbd8a3963f0173ccd23f9147d4c384b5 | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/64580 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://openwall.com/lists/oss-security/2010/06/23/2 | 2023-02-13 | |
| http://openwall.com/lists/oss-security/2010/09/28/1 | 2023-02-13 | |
| http://openwall.com/lists/oss-security/2010/09/29/7 | 2023-02-13 | |
| http://openwall.com/lists/oss-security/2010/09/30/1 | 2023-02-13 | |
| http://openwall.com/lists/oss-security/2010/09/30/6 | 2023-02-13 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=652122 | 2010-11-10 |
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2010/dsa-2126 | 2023-02-13 | |
| http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 | 2023-02-13 | |
| https://access.redhat.com/security/cve/CVE-2010-3448 | 2010-11-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | < 2.6.34 Search vendor "Linux" for product "Linux Kernel" and version " < 2.6.34" | - |
Affected
| ||||||