PT-2009-4347 · Linux+1 · Linux Kernel+1

Solar Designer · Published 2009-09-15 · Updated 2017-09-29 · CVE-2009-1883

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.9

Description: The issue concerns the z90crypt unlocked ioctl function in the z90crypt driver, which fails to perform a capability check for the Z90QUIESCE operation. This allows local users with euid 0 privileges to cause a driver outage.

Recommendations: For Linux kernel version 2.6.9, consider disabling the z90crypt driver or restricting its use to prevent exploitation until a fix is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-1883

DSA-1929-1

RHSA-2009:1438

RHSA-2009_1438

Affected Products

Linux Kernel

Red Hat

References · 75

• https://bdu.fstec.ru/vul/2015-05167 · Security Note
• https://bdu.fstec.ru/vul/2015-05169 · Security Note
• https://bdu.fstec.ru/vul/2015-05148 · Security Note
• https://bdu.fstec.ru/vul/2015-04259 · Security Note
• https://bdu.fstec.ru/vul/2015-05164 · Security Note
• https://bdu.fstec.ru/vul/2015-04265 · Security Note
• https://bdu.fstec.ru/vul/2015-05141 · Security Note
• https://bdu.fstec.ru/vul/2015-04247 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=505983 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05151 · Security Note
• https://bdu.fstec.ru/vul/2015-05150 · Security Note
• https://bdu.fstec.ru/vul/2015-04248 · Security Note
• http://secunia.com/advisories/36759 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04245 · Security Note