Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:56
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html - Exploit, Patch, Vendor Advisory | |
References | () http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html - | |
References | () http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10 - | |
References | () http://marc.info/?l=linux-kernel&m=111630512512222 - | |
References | () http://www.redhat.com/support/errata/RHSA-2005-420.html - | |
References | () http://www.securityfocus.com/archive/1/427980/100/0/threaded - | |
References | () http://www.securityfocus.com/bid/13651 - | |
References | () http://www.vupen.com/english/advisories/2005/0557 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10264 - |
Information
Published : 2005-05-17 04:00
Updated : 2024-11-20 23:56
NVD link : CVE-2005-1264
Mitre link : CVE-2005-1264
CVE.ORG link : CVE-2005-1264
JSON object : View
Products Affected
linux
- linux_kernel
CWE