** Description changed: - more tight ioctl permissions in dl2k driver + The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux + kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, + which allows local users to write data to an Ethernet adapter via an + ioctl call. Break-Fix: - 1bb57e940e1958e40d51f2078f50c3a96a9b2d75
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/999359 Title: CVE-2012-2313 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/999359/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
