Unscored severity · published Sep 8, 2010
CVE-2010-2803
The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x…
–
CVSS
0.5%
EPSS
No
On KEV
Description
The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
before 2.6.27.53; 2.6.32 before 2.6.32.21; 2.6.34 before 2.6.34.6; 2.6.35 before 2.6.35.4 · source: NVD
DL
Debian Linux · Debian
5.0 · source: NVD
LE
Linux Enterprise Desktop · Suse
11 · source: NVD
LE
Linux Enterprise High Availability Extension · Suse
11 · source: NVD
LE
Linux Enterprise Real Time · Suse
11 · source: NVD
LE
Linux Enterprise Server · Suse
11 · source: NVD
OP
Opensuse · Opensuse
11.1; 11.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2803
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2803
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability