Back to search
CVE-2009-1883
Published: Sep 18, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
[oss-security] 20090915 CVE-2009-1883 kernel: missing capability check in z90crypt
mailing-list
x_refsource_MLIST
oval:org.mitre.oval:def:9513
vdb-entry
signature
x_refsource_OVAL
USN-852-1
vendor-advisory
x_refsource_UBUNTU
36759
third-party-advisory
x_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=505983
x_refsource_CONFIRM
[oss-security] 20090915 Re: CVE-2009-1883 kernel: missing capability check in z90crypt
mailing-list
x_refsource_MLIST
SUSE-SA:2010:013
vendor-advisory
x_refsource_SUSE
RHSA-2009:1438
vendor-advisory
x_refsource_REDHAT
37105
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now