CVE-2011-2022: Input Validation
Last updated 24 July 2024
Other sources
The agpgenericremovememory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOCUNBIND agpioctl ioctl call, a different vulnerability than CVE-2011-1745.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2011-2022?
CVE-2011-2022 is a vulnerability in the Linux kernel that allows local users to gain privileges or cause a denial of service through a crafted AGPIOC_UNBIND call.
What versions of the Linux kernel are affected by CVE-2011-2022?
CVE-2011-2022 affects the Linux kernel versions before 2.6.38.5.
How do I fix CVE-2011-2022?
To fix CVE-2011-2022, upgrade your Linux kernel to version 2.6.38.5 or later.
What potential impact does CVE-2011-2022 have on systems?
CVE-2011-2022 can lead to local privilege escalation or system crashes, affecting system stability and security.
Who can exploit CVE-2011-2022?
CVE-2011-2022 can be exploited by local users on affected systems to gain elevated privileges.