Description
drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions, which allows local users to enable DRM debugging and obtain sensitive information.
References (8)
Core 8
Core References
Broken Link vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2005:235
Vendor Advisory vendor-advisory
x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
Vendor Advisory x_refsource_confirm
http://www.kernel.org/hg/linux-2.6/?cmd=changeset%3Bnode=d7067d7d1f92cba14963a430cfbd53098cbbc8fd
Permissions Required, Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17280
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15154
Third Party Advisory, VDB Entry vendor-advisory
x_refsource_fedora
http://www.securityfocus.com/advisories/9549
Permissions Required, Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17114
Patch, Vendor Advisory x_refsource_confirm
http://bugs.gentoo.org/show_bug.cgi?id=107893
Scores
EPSS
0.0040
EPSS Percentile
32.8%
Details
CWE
CWE-264
Status
published
Products (22)
linux/linux_kernel
2.6.10
linux/linux_kernel
2.6.11
linux/linux_kernel
2.6.11.1
linux/linux_kernel
2.6.11.2
linux/linux_kernel
2.6.11.3
linux/linux_kernel
2.6.11.4
linux/linux_kernel
2.6.11.5
linux/linux_kernel
2.6.11.6
linux/linux_kernel
2.6.11.7
linux/linux_kernel
2.6.11.8
... and 12 more
Published
Oct 12, 2005
Tracked Since
Feb 18, 2026