CVE-2011-0521
The dvb_ca_ioctl function in drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel before 2.6.38-rc2 does not check the sign of a certain integer field, which allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a negative value.
Date published : 2011-02-02
http://www.securityfocus.com/bid/45986
http://www.securityfocus.com/archive/1/520102/100/0/threaded