CVE-2011-2022 — Improper Input Validation in Kernel

CWE-20 — Improper Input ValidationCWE-416 — Use After FreeCWE-843 — Type ConfusionCWE-414 — Missing Lock CheckCWE-787 — Out-of-bounds WriteCWE-99 — Resource InjectionCWE-413 — Improper Resource LockingCWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-189CWE-310CWE-26437 documents9 sources
Severity
6.9MEDIUMNVD
CISA9.8CISA8.8CISA7.8CISA5.7
EPSS
0.0%
top 86.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Linux KernelRedhat Enterprise LinuxRedhat Enterprise Linux AUS+4 more
Timeline
PublishedMay 9
Latest updateJun 18

Description

The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl ioctl call, a different vulnerability than CVE-2011-1745.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages4 packages

▶NVDlinux/linux_kernel< 2.6.38.5

Also affects: Enterprise Linux 5.0, 5.6

Patches

Patch: openwall.com ↗Patch: openwall.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-7768-324v-qm6c: The agp_generic_remove_memory function in drivers/char/agp/generic↗2022-05-13
▶
CVEList
CVE-2011-2022: The agp_generic_remove_memory function in drivers/char/agp/generic↗2011-05-09
▶

📋Vendor Advisories

29
Red Hat
kernel: dm raid: fix address sanitizer warning in raid_status↗2025-06-18
▶
Red Hat
kernel: bpf: Fix a btf decl_tag bug when tagging a function↗2025-02-26
▶
Red Hat
kernel: tipc: fix use-after-free Read in tipc_named_reinit↗2025-02-26
▶
Red Hat
kernel: bonding: fix missed rcu protection↗2025-02-26
▶
Red Hat
kernel: netfilter: nf_tables: unregister flowtable hooks on netns exit↗2024-08-22
▶

💬Community

1
Bugzilla
CVE-2011-1745 CVE-2011-2022 kernel: agp: insufficient pg_start parameter checking in AGPIOC_BIND and AGPIOC_UNBIND ioctls↗2011-04-22
▶
CVE-2011-2022 — Improper Input Validation in Kernel | cvebase