VULNERABILITY INTELLIGENCE

CVE-2010-4347

CVSS score6.9 MEDIUM
EPSS probability2.20%
CISA KEVNot currently listed
Published2010-12-22
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.

Weakness classification

  • CWE-269: Improper Privilege Management

Primary references