CVE-2009-3725

The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2)…

published November 6, 2009

CVSS
—
EPSS
1%
Percentile
48.6
In the wild
Unconfirmed
What it is

The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00611 · 48.6th percentile
Published
2009-11-06T15:00Z
EPSS history
Timeline
  • 06 NOV 15:00Z
    The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2)…
    cvelistv5