CVE-2012-0044 on Ubuntu 12.04 LTS (precise) - medium.
Description:
Integer overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.1.5 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted ioctl call. Chen Haogang discovered an integer overflow that could result in memory corruption. A local unprivileged user could use this to crash the system.