{"id":"CVE-2009-3725","aliases":["DSA-2012-1","EUVD-2009-3697","GHSA-479j-8mrp-jf68"],"status":"published","title":"The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN...","description":"The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00611,"percentile":0.4956,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2009-11-06T15:00:00Z","modified":"2026-06-16T23:12:14Z","affected":[{"source":"osv","ecosystem":"Debian:5.0","package":"linux-2.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.26-21lenny4"}]}],"versions":["2.6.26-13","2.6.26-13lenny2","2.6.26-13lenny2~bpo40+1","2.6.26-14","2.6.26-15","2.6.26-15lenny1","2.6.26-15lenny2","2.6.26-15lenny3","2.6.26-15~bpo40+1","2.6.26-15~bpo40+2","2.6.26-16","2.6.26-17","2.6.26-17lenny1","2.6.26-17lenny2","2.6.26-17lenny2~bpo40+1","2.6.26-17~bpo40+1","2.6.26-18","2.6.26-19","2.6.26-19lenny1","2.6.26-19lenny2","2.6.26-19~bpo40+1","2.6.26-20","2.6.26-20~bpo40+1","2.6.26-21","2.6.26-21lenny1","2.6.26-21lenny2","2.6.26-21lenny3","2.6.26-21~bpo40+1"],"bundled":2}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.5","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/38905","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel\u0026m=125449888416314\u0026w=2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"http://xorl.wordpress.com/2009/10/31/linux-kernel-multiple-capabilities-missing-checks/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://patchwork.kernel.org/patch/51383/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37113","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://patchwork.kernel.org/patch/51387/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://patchwork.kernel.org/patch/51382/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=oss-security\u0026m=125716192622235\u0026w=2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security\u0026m=125715484511380\u0026w=2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://patchwork.kernel.org/patch/51384/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36834","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3725"},{"url":"http://patchwork.kernel.org/patch/51382"},{"url":"http://patchwork.kernel.org/patch/51383"},{"url":"http://patchwork.kernel.org/patch/51384"},{"url":"http://patchwork.kernel.org/patch/51387"},{"url":"http://xorl.wordpress.com/2009/10/31/linux-kernel-multiple-capabilities-missing-checks"},{"url":"https://github.com/advisories/GHSA-479j-8mrp-jf68"}],"sources":{"cve":[{"id":"CVE-2009-3725","description":"The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems.","status":"published","published":"2009-11-06T15:00:00Z","modified":"2024-08-07T06:38:30.225Z","updated_at":"2026-11-02T14:33:24.10565Z"}],"euvd":[{"id":"EUVD-2009-3697","description":"The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems.","status":"published","published":"2009-11-06T15:00:00Z","modified":"2024-08-07T06:38:30Z","updated_at":"2026-11-03T01:39:12.69352Z"}],"ghsa":[{"id":"GHSA-479j-8mrp-jf68","title":"The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN...","description":"The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems.","status":"published","published":"2022-05-02T03:47:59Z","modified":"2025-04-09T04:17:11Z","updated_at":"2026-11-02T15:01:01.075702Z"}],"nvd":[{"id":"CVE-2009-3725","description":"The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems.","status":"published","published":"2009-11-06T15:30:00.547Z","modified":"2026-06-16T23:12:14.437Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:01:37.004244Z"}],"osv":[{"id":"DSA-2012-1","title":"linux-2.6 - several issues","status":"published","published":"2010-03-11T00:00:00Z","modified":"2026-03-09T01:22:06.728856Z","updated_at":"2026-11-02T15:46:15.108335Z"}]}}