Design/Logic Flaw

2012-06-1310:24:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.0%

JSON

The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.

CPENameOperatorVersion
linux_kerneleq3.3 rc4
linux_kerneleq3.3 rc5
linux_kerneleq3.3 rc3
linux_kerneleq3.3.2
linux_kerneleq3.3.3
linux_kerneleq3.3 rc2
linux_kernelle3.3.6
linux_kerneleq3.3.4
linux_kerneleq3.3.5
linux_kerneleq3.3 rc6

Name	Operator	Version
linux_kernel	eq	3.3 rc4
linux_kernel	eq	3.3 rc5
linux_kernel	eq	3.3 rc3
linux_kernel	eq	3.3.2
linux_kernel	eq	3.3.3
linux_kernel	eq	3.3 rc2
linux_kernel	le	3.3.6
linux_kernel	eq	3.3.4
linux_kernel	eq	3.3.5
linux_kernel	eq	3.3 rc6