Description
drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions, which allows local users to enable DRM debugging and obtain sensitive information.
References
- MDKSA-2005:235 vendor-advisory
- MDKSA-2005:220 vendor-advisory
- http://www.kernel.org/hg/linux-2.6/?cmd=changeset%3Bnode=d7067d7d1f92cba14963a430cfbd53098cbbc8fd
- 17280 third-party-advisory
- 15154 vdb-entry
- FEDORA-2005-1007 vendor-advisory
- 17114 third-party-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=107893