CVE-2009-3725

Linux Kernel < 2.6.31.5 - Privilege Escalation via Connector Layer Subsystem Interaction

Title source: llm
STIX 2.1

Description

The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems.

References (13)

Core 13
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38905
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://marc.info/?l=linux-kernel&m=125449888416314&w=2
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-864-1
Patch, Vendor Advisory x_refsource_confirm
http://patchwork.kernel.org/patch/51383/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37113
Patch, Vendor Advisory x_refsource_confirm
http://patchwork.kernel.org/patch/51387/
Patch, Vendor Advisory x_refsource_confirm
http://patchwork.kernel.org/patch/51382/
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=125716192622235&w=2
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=125715484511380&w=2
Patch, Vendor Advisory x_refsource_confirm
http://patchwork.kernel.org/patch/51384/
Patch, Third Party Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/36834

Scores

EPSS 0.0061
EPSS Percentile 45.6%

Details

CWE
CWE-264
Status published
Products (6)
canonical/ubuntu_linux 6.06
canonical/ubuntu_linux 8.04
canonical/ubuntu_linux 8.10
canonical/ubuntu_linux 9.04
canonical/ubuntu_linux 9.10
linux/linux_kernel < 2.6.31.5
Published Nov 06, 2009
Tracked Since Feb 18, 2026