NetSight
IP …
low1.2

CVE-2012-2313

The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows …

Impact

The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.3.6
Versions 3.3, 3.3.1, 3.3.2, 3.3.3, 3.3.4
NovellSuse Linux Enterprise Server
Version 10.0
RedhatEnterprise Linux
Version 5
RedhatEnterprise Linux Desktop
Version 5.0
RedhatEnterprise Linux Eus
Version 5.6.z
RedhatEnterprise Linux Long Life
Version 5.6
RedhatEnterprise Linux Server Aus
Version 6.2
RedhatEnterprise Linux Server Eus
Versions 6.1.z, 6.2.z

Weakness classification

CWE-264

References