CVE-2005-0839

Linux kernel <2.6.11 - Privilege Escalation

Title source: llm

Description

Linux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions.

References (5)

[Mailing List] http://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg64704.html

[Various Sources] http://linux.bkbits.net:8080/linux-2.6/cset%4041fa6464E1UuGu6zmketEYxm73KSyQ

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2005-366.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/427980/100/0/threaded

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9460

Scores

EPSS 0.0008

EPSS Percentile 22.3%

Classification

Status draft

Affected Products (15)

linux/linux_kernel

Timeline

Published May 02, 2005

Tracked Since Feb 18, 2026