Description
The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the (1) behavior and (2) logging level of the driver by modifying this file.
References (18)
Core 18
Core References
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2010/dsa-2005
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/11/13/4
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/11/13/1
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-864-1
Exploit x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=526068
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/37019
Vendor Advisory x_refsource_confirm
http://support.avaya.com/css/P8/documents/100073666
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/37909
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/60202
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11018
Patch x_refsource_confirm
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=66dca9b8c50b5e59d3bea8b21cee5c6dae6c9c46
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
Vendor Advisory x_refsource_confirm
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html
Vendor Advisory vendor-advisory
x_refsource_redhat
https://rhn.redhat.com/errata/RHSA-2010-0095.html
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7163
Vendor Advisory vendor-advisory
x_refsource_redhat
https://rhn.redhat.com/errata/RHSA-2010-0046.html
Scores
EPSS
0.0053
EPSS Percentile
42.1%
Details
CWE
CWE-264
Status
published
Products (50)
linux/linux_kernel
2.6.0
linux/linux_kernel
2.6.1
linux/linux_kernel
2.6.2
linux/linux_kernel
2.6.10
linux/linux_kernel
2.6.11
linux/linux_kernel
2.6.11.1
linux/linux_kernel
2.6.11.2
linux/linux_kernel
2.6.11.3
linux/linux_kernel
2.6.11.4
linux/linux_kernel
2.6.11.5
... and 40 more
Published
Nov 16, 2009
Tracked Since
Feb 18, 2026