Release Date: | 2009-11-16 |
The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
See more information about CVE-2009-3939 from MITRE CVE dictionary and NIST NVD
NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.
Base Score: | 6.6 | Base Metrics: | AV:L/AC:L/Au:N/C:N/I:C/A:C |
Access Vector: | Local network | Attack Complexity: | Low |
Authentication: | None required | Confidentiality Impact: | None |
Integrity Impact: | Complete | Availability Impact: | Complete |
Platform | Errata | Release Date |
Oracle Enterprise Linux version 4 (kernel) | ELSA-2010-0076 | 2010-02-03 |
Oracle Enterprise Linux version 4 (ocfs2-2.6.9-89.0.20.0.1.EL) | ELSA-2010-0076 | 2010-02-03 |
Oracle Enterprise Linux version 4 (oracleasm-2.6.9-89.0.20.0.1.EL) | ELSA-2010-0076 | 2010-02-03 |
Oracle Linux version 5 (kernel) | ELSA-2010-0046 | 2010-01-20 |
Oracle Linux version 5 (ocfs2-2.6.18-164.11.1.0.1.el5) | ELSA-2010-0046 | 2010-01-20 |
Oracle Linux version 5 (oracleasm-2.6.18-164.11.1.0.1.el5) | ELSA-2010-0046 | 2010-01-20 |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team