CVE-2019-1010066

Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control. The impact is: An attacker could modify model specific registers. The component is: ioctl handling. The attack vector is: An attacker could exploit a bug in ioctl interface whitelist checking, in order to write to model specific registers, normally a function reserved for the root user. The fixed version is: v1.2.0.

Score

CVSS 3.0 7.5 High

Status

Modified - josh@bress.net

Published

2019-07-18

Last modified

2024-08-05

Weaknesses

CWE-269, CWE-862

Affected products

• Msr-safe (Lawrence Livermore National Laboratory)
• Model Specific Registers-safe (Llnl)

References

• https://github.com/LLNL/msr-safe/compare/v1.1.0...v1.2.0
• https://www.tldp.org/LDP/lkmpg/2.4/html/x856.html