Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

drbd8: privilege escalation

Package(s):

drbd8

CVE #(s):

Created:

March 16, 2010

Updated:

March 17, 2010

Description:

From the Debian advisory:

Philipp Reisner fixed an issue in the drbd kernel module that allows local users to send netlink packets to perform actions that should be restricted to users with CAP_SYS_ADMIN privileges. This is a similar issue to those described by CVE-2009-3725.

Alerts:

Debian

DSA-2015

2010-03-15

(Log in to post comments)