VULNERABILITY INTELLIGENCE

CVE-2009-3725

CVSS score7.2 HIGH
EPSS probability0.61%
CISA KEVNot currently listed
Published2009-11-06
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems.

Primary references