VULNERABILITY INTELLIGENCE

CVE-2005-1264

CVSS score7.2 HIGH
EPSS probability0.53%
CISA KEVNot currently listed
Published2005-05-17
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.

Primary references