VULNERABILITY INTELLIGENCE

CVE-2005-1264

CVSS score7.2 NONE
EPSS probability0.53%
CISA KEVNot currently listed
Published2005-05-17
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references