Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic" issue.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel SysKonnect FDDI驱动非授权重置统计漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel的drivers/net/skfp/skfddi.c文件中的skfp_ioctl函数中存在错误的逻辑,本地用户在缺少CAP_NET_ADMIN权限而不是拥有这个权限的时候才可以执行SKFP_CLR_STATS请求,因此无需授权便可以重置驱动统计。
CVSS Information
N/A
Vulnerability Type
N/A