CVE-2010-2803: Debian Linux

Low severity, CVSS 1.9. EPSS: 0.5% chance of exploitation in the next 30 days.

The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount.

Affected products

• Debian Debian Linux: version 5.0 only
• Linux Linux Kernel: before 2.6.27.53 (fixed in 2.6.27.53); from 2.6.32, before 2.6.32.21 (fixed in 2.6.32.21); from 2.6.34, before 2.6.34.6 (fixed in 2.6.34.6); from 2.6.35, before 2.6.35.4 (fixed in 2.6.35.4)
• Opensuse Opensuse: version 11.1 only; version 11.3 only
• Suse Linux Enterprise Desktop: version 11 only
• Suse Linux Enterprise High Availability Extension: version 11 only
• Suse Linux Enterprise Real Time: version 11 only
• Suse Linux Enterprise Server: version 11 only

Published 2010-09-08. Last modified 2026-06-16.