CVE-2011-1016: Input Validation
Check values passed in to AARESOLVEOFFSET on r300. It can be used to write arbitrary data to VRAM, GTT, etc. This is specific to a range of GPUs only.
drm/radeon/kms: check AA resolve registers on r300 http://git.kernel.org/linus/fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
[PATCH] drm/radeon: fix regression with AA resolve checking https://patchwork.kernel.org/patch/576101/ -> http://git.kernel.org/linus/45e4039c3aea597ede44a264cea322908cdedfe9
Other sources
The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1016?
CVE-2011-1016 is classified as a moderate severity vulnerability that allows for arbitrary data writing.
How do I fix CVE-2011-1016?
To mitigate CVE-2011-1016, update your Linux kernel to version 2.6.39 or higher.
Which systems are affected by CVE-2011-1016?
CVE-2011-1016 specifically affects systems running Linux kernel versions up to and including 2.6.38.
What does CVE-2011-1016 exploit?
CVE-2011-1016 exploits vulnerabilities in the AARESOLVE_OFFSET on r300 GPUs to write arbitrary data.
Is CVE-2011-1016 specific to certain hardware?
Yes, CVE-2011-1016 is specific to a range of GPUs, particularly those using the r300 graphics architecture.