Description
The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/drm/i915_drv.c in OpenBSD does not restrict the DRM_I915_HWS_ADDR ioctl to the Direct Rendering Manager (DRM) master, which allows local users to cause a denial of service (memory corruption) via a crafted ioctl call, related to absence of the DRM_MASTER and DRM_ROOT_ONLY flags in the ioctl's configuration.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | linux-2.6.24 | 2.6.24-6~etchnhalf.6 | DSA-1655-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-92.1.22.el5 | RHSA-2008:1017 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 1 | kernel-rt +9 | 2.6.24.7-93.el5rt | RHSA-2009:0009 |
Advisories 3
- RHSA-2008:1017 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1655-1 linux-2.6.24 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2009:0009 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- 245846 vendor-advisory
- http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-2.6.24_2.6.24-6~etchnhalf.6.diff.gz
- DSA-1655 vendor-advisory
- MDVSA-2008:224 vendor-advisory
- USN-659-1 vendor-advisory
- RHSA-2009:0009 vendor-advisory
- 1021065 vdb-entry
- FEDORA-2008-8929 vendor-advisory
- 33586 third-party-advisory
- 32709 third-party-advisory
- 32918 third-party-advisory
- USN-679-1 vendor-advisory
- http://wiki.rpath.com/Advisories:rPSA-2008-0316
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0316
- oval:org.mitre.oval:def:11542 vdb-entry signature
- http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c.diff?r1=1.7%3Br2=1.8
- RHSA-2008:1017 vendor-advisory
- [source-changes] 20081017 CVS: cvs.openbsd.org: src mailing-list
- 32386 third-party-advisory
- 31792 vdb-entry
- FEDORA-2008-8980 vendor-advisory
- http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c
- 33182 third-party-advisory
- 20081112 rPSA-2008-0316-1 kernel mailing-list
- 32315 third-party-advisory