Vulnerability CVE-2007-4308: Information

Description

The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.

Severity: LOW (1.9)

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      Running on/with:

      cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*

      ---

      cpe:2.3:a:adaptec:aacraid_controller:*:*:*:*:*:*:*:*

      ---