CVEvulnerability

CVE-2009-3939

7.1 HIGH Published 2009-11-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-11-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0 ([email protected])
6.6 MEDIUM — AV:L/AC:L/Au:N/C:N/I:C/A:C
Weaknesses
CWE-732

Description

The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.

Affected configurations

• linux linux kernel (<= 2.6.31.6) • redhat virtualization 5 • redhat enterprise linux desktop 5.0 • redhat enterprise linux eus 5.4 • redhat enterprise linux server 5.0 • redhat enterprise linux workstation 5.0 • canonical ubuntu linux 6.06 • canonical ubuntu linux 8.04 • canonical ubuntu linux 8.10 • canonical ubuntu linux 9.04 • canonical ubuntu linux 9.10 • debian debian linux 5.0 • avaya aura application enablement services 5.2 • avaya aura application enablement services 5.2.1 • avaya aura communication manager 5.2 • avaya aura session manager 1.1 • avaya aura session manager 5.2 • avaya aura sip enablement services 5.2 • avaya aura system manager 5.2 • avaya aura system manager 6.0 • avaya aura system platform 1.1 • avaya voice portal 5.0 • opensuse opensuse 11.0 • opensuse opensuse 11.1 • opensuse opensuse 11.2 • suse linux enterprise desktop 10 • suse linux enterprise desktop 11 • suse linux enterprise server 10 • suse linux enterprise server 11

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

Referenced by CWE · observed example (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References