VULNERABILITY INTELLIGENCE

CVE-2009-1883

CVSS score4.4 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2009-09-18
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P

Description

The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage.

Primary references