VULNERABILITY INTELLIGENCE

CVE-2007-4308

CVSS score1.9 LOW

EPSS probability0.37%

CISA KEVNot currently listed

Published2007-08-13

Last modified2026-06-16

Description

The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.