CVE-2010-3850

Fixed in a distro release EPSS <1%

The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.

Published 2010-12-30 · CVE record · OSV

Products: linux_kernel, suse linux_enterprise_desktop, suse linux_enterprise_real_time_extension, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, debian_linux, canonical ubuntu_linux

Distro releases