CVE-2007-4308

The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.

🔗 References (80)

• cve@mitrehttp://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2
• cve@mitrehttp://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html
• cve@mitrehttp://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html
• cve@mitrehttp://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html
• cve@mitrehttp://lists.vmware.com/pipermail/security-announce/2008/000005.html
• cve@mitrehttp://lkml.org/lkml/2007/7/23/195
• cve@mitrehttp://secunia.com/advisories/26322
• cve@mitrehttp://secunia.com/advisories/26643
• cve@mitrehttp://secunia.com/advisories/26647
• cve@mitrehttp://secunia.com/advisories/26651
• cve@mitrehttp://secunia.com/advisories/27212
• cve@mitrehttp://secunia.com/advisories/27322
• cve@mitrehttp://secunia.com/advisories/27436
• cve@mitrehttp://secunia.com/advisories/27747
• cve@mitrehttp://secunia.com/advisories/27912