CVE-2012-0044

Integer overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.1.5 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted ioctl call.

• CWE-190

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5cd335165e31db9dbab636fd29895d41da55dd2
• http://rhn.redhat.com/errata/RHSA-2012-0743.htmlThird Party Advisory
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.5Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/01/12/1Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/51371Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1555-1Patch, Third Party Advisory
• http://www.ubuntu.com/usn/USN-1556-1Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=772894Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/a5cd335165e31db9dbab636fd29895d41da55dd2Patch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5cd335165e31db9dbab636fd29895d41da55dd2
• http://rhn.redhat.com/errata/RHSA-2012-0743.htmlThird Party Advisory
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.5Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/01/12/1Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/51371Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1555-1Patch, Third Party Advisory
• http://www.ubuntu.com/usn/USN-1556-1Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=772894Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/a5cd335165e31db9dbab636fd29895d41da55dd2Patch, Third Party Advisory

Published

May 17, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0038Integer overflow in the xfs_acl_from_disk function in fs/xfs…5.5
• CVE-2012-0039GLib 2.31.8 and earlier, when the g_str_hash function is use…7.5
• CVE-2012-0040Cross-site scripting (XSS) vulnerability in modules/core/www…
• CVE-2012-0041The dissect_packet function in epan/packet.c in Wireshark 1.…
• CVE-2012-0042Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does no…
• CVE-2012-0043Buffer overflow in the reassemble_message function in epan/d…
• CVE-2012-0045The em_syscall function in arch/x86/kvm/emulate.c in the KVM…
• CVE-2012-0046mediawiki allows deleted text to be exposed7.5
• CVE-2012-0047Cross-site scripting (XSS) vulnerability in Apache Wicket 1.…
• CVE-2012-0048OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause…
• CVE-2012-0049OpenTTD before 1.1.5 contains a Denial of Service (slow read…4.3
• CVE-2012-0050OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS app…