VULNERABILITY INTELLIGENCE

CVE-2010-3850

CVSS score2.1 LOW
EPSS probability0.80%
CISA KEVNot currently listed
Published2010-12-30
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:N

Description

The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.

Primary references