Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel ‘rio_ioctl’ 函数权限许可和访问控制问题漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux kernel 3.3.7之前版本中的drivers/net/ethernet/dlink/dl2k.c中的rio_ioctl函数中存在漏洞,该漏洞源于未限制对SIOCSMIIREG命令的访问。本地用户可利用该漏洞借助ioctl调用在以太网适配器中写数据。
CVSS Information
N/A
Vulnerability Type
N/A