CVE-2007-3851

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-13 · updated 2026-06-16
Weakness: CWE-399

Description

The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager (DRM) to write to arbitrary memory locations and gain privileges via a crafted batchbuffer.

Affected products

Linux kernel: through 2.6.22.1

References

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2
http://secunia.com/advisories/26389
http://secunia.com/advisories/26450
http://secunia.com/advisories/26500
http://secunia.com/advisories/26643
http://secunia.com/advisories/26664
http://secunia.com/advisories/26760
http://secunia.com/advisories/27227
http://www.debian.org/security/2007/dsa-1356
http://www.mandriva.com/security/advisories?name=MDVSA-2008:105
http://www.novell.com/linux/security/advisories/2007_51_kernel.html
http://www.novell.com/linux/security/advisories/2007_53_kernel.html

Get alerted when CVE-2007-3851 or the next vulnerability affects your stack