The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 13, 2007 |
| Suse | — | Upgrade kernel-pmac64Upgrade kernel-sn2Upgrade kernel-ppc64Upgrade kernel-s390xUpgrade um-host-kernelUpgrade kernel-xenUpgrade kernel-iseries64Upgrade kernel-s390-debugUpgrade kernel-symsUpgrade kernel-umUpgrade kernel-sourceUpgrade kernel-64k-pagesizeUpgrade um-host-install-initrdUpgrade kernel-s390Upgrade kernel-bigsmpUpgrade kernel-s390x-debugUpgrade kernel-smpUpgrade kernel-kdumpUpgrade kernel-pseries64Upgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-debugUpgrade suse-release | Feb 17, 2015 | Aug 13, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.15-29-686Upgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.15-29-386Upgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.15-29-mckinley-smpUpgrade linux-image-2.6.15-29-hppa64Upgrade linux-image-2.6.15-29-powerpcUpgrade linux-image-2.6.15-29-sparc64Upgrade linux-image-2.6.15-29-powerpc64-smpUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.15-29-amd64-genericUpgrade linux-image-2.6.15-29-itanium-smpUpgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.15-29-hppa32-smpUpgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.15-29-mckinleyUpgrade linux-image-2.6.15-29-itaniumUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.15-29-hppa32Upgrade linux-image-2.6.15-29-powerpc-smpUpgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.15-29-server-bigironUpgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.15-29-hppa64-smpUpgrade linux-image-2.6.15-29-amd64-k8Upgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.15-29-k7Upgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.15-29-sparc64-smpUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.15-29-amd64-serverUpgrade linux-image-2.6.15-29-serverUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.15-29-amd64-xeonUpgrade linux-image-2.6.20-16-sparc64 | Nov 8, 2024 | Aug 13, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub