Description
The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-21lenny4 | DSA-2012-1 |
Advisories 1
- DSA-2012-1 linux-2.6 - several issues Debian Security (DSA / DLA) · Mar 9, 2026
References
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.5
- 38905 third-party-advisory
- [linux-kernel] 20091002 Re: [PATCH 0/8] SECURITY ISSUE with connector mailing-list
- USN-864-1 vendor-advisory
- http://xorl.wordpress.com/2009/10/31/linux-kernel-multiple-capabilities-missing-checks/
- http://patchwork.kernel.org/patch/51383/
- 37113 third-party-advisory
- http://patchwork.kernel.org/patch/51387/
- http://patchwork.kernel.org/patch/51382/
- [oss-security] 20091102 Re: CVE request: kernel: connector security bypass mailing-list
- [oss-security] 20091102 CVE request: kernel: connector security bypass mailing-list
- http://patchwork.kernel.org/patch/51384/
- 36834 vdb-entry