CVE-2011-1016

Severity: low (CVSS 1.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-02-28 · updated 2026-06-16
Weakness: CWE-20

Description

The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values.

Affected products

Linux kernel: before 2.6.38; 2.6.38, 2.6.38-rc1, 2.6.38-rc2, 2.6.38-rc3, 2.6.38-rc4 — fixed in 2.6.38

How to fix

Upgrade to a fixed version: Linux kernel 2.6.38. Check the vendor advisory for mitigations.

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
http://openwall.com/lists/oss-security/2011/02/24/11
http://openwall.com/lists/oss-security/2011/02/24/3
http://openwall.com/lists/oss-security/2011/02/25/4
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5
http://www.securityfocus.com/bid/46557
https://bugzilla.redhat.com/show_bug.cgi?id=680000
https://exchange.xforce.ibmcloud.com/vulnerabilities/65691
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
http://openwall.com/lists/oss-security/2011/02/24/11
http://openwall.com/lists/oss-security/2011/02/24/3
http://openwall.com/lists/oss-security/2011/02/25/4

Get alerted when CVE-2011-1016 or the next vulnerability affects your stack