Impact
local privilege escalation
Solution
Please Install the Updated Packages.
Insight
This updated openSUSE 11.3 kernel fixes the following security bugs:
CVE-2010-3310: local users could corrupt kernel heap memory via ROSE sockets.
CVE-2010-2962: local users could write to any kernel memory location via the i915 GEM ioctl interface. Exploitability requires the presence of a i915 compatible graphics card.
Additionally the update restores the compat_alloc_userspace() inline function and includes several other bug fixes.
Affected
kernel on openSUSE 11.3
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2010-2962, CVE-2010-3310 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities