CVE Vulnerabilities

CVE-2007-4308

Published: Aug 13, 2007 | Modified: Oct 15, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
1.9 LOW
AV:L/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.

Affected Software

Name Vendor Start Version End Version
Linux_kernel Linux 2.6.23-rc1 (including) 2.6.23-rc1 (including)

References