CVE-2012-2383: Integer Overflow
Description of the problem: On 32-bit systems, a large args->buffercount from userspace via ioctl may overflow the allocation size, leading to out-of-bounds access.
References: http://www.openwall.com/lists/oss-security/2012/05/21/1
Upstream fix: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=ed8cd3b2cd61004cab85380c52b1817aca1ca49b
Other sources
Integer overflow in the i915gemexecbuffer2 function in drivers/gpu/drm/i915/i915gemexecbuffer.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted ioctl call.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2383?
CVE-2012-2383 has a high severity level due to its potential for out-of-bounds access leading to system instability or security issues.
How do I fix CVE-2012-2383?
To fix CVE-2012-2383, update the Linux kernel to a version beyond 3.3.4 that addresses this buffer overflow issue.
What systems are affected by CVE-2012-2383?
CVE-2012-2383 affects 32-bit systems running certain versions of the Linux kernel, specifically versions up to 3.3.4.
What type of vulnerability is CVE-2012-2383?
CVE-2012-2383 is classified as a buffer overflow vulnerability due to improper handling of input data.
Is CVE-2012-2383 exploitable remotely?
CVE-2012-2383 can potentially be exploited remotely if the vulnerable system exposes its interfaces to untrusted users.