PT-2009-4347

CVE-2009-1883

Published

2009-09-15

Updated

2017-09-29

Description by

CVSS 2.0

4.4

Medium

MetricsAV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.9

Description: The issue concerns the z90crypt unlocked ioctl function in the z90crypt driver, which fails to perform a capability check for the Z90QUIESCE operation. This allows local users with euid 0 privileges to cause a driver outage.

Recommendations: For Linux kernel version 2.6.9, consider disabling the z90crypt driver or restricting its use to prevent exploitation until a fix is available.

Exploitability

Fix

Researchers

Solar Designer

Vendors

Affected products

Weakness enumeration

CWE-264

Related identifiers

CVE-2009-1883

DSA-1929-1

RHSA-2009:1438