CVE-2013-6383

Published November 27th, 2013

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.9

MEDIUM

Affected

PROJECT

Description

The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capability, which allows local users to bypass intended access restrictions via a crafted ioctl call.

torvalds/linux

Linux kernel source tree

GitHub

237K