The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-05-24T23:00:00Z

Updated: 2024-08-06T23:53:32.920Z

Reserved: 2011-10-18T00:00:00Z

Link: CVE-2011-4080

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-05-24T23:55:02.433

Modified: 2024-11-21T01:31:48.500

Link: CVE-2011-4080

cve-icon Redhat

Severity : Low

Publid Date: 2011-03-23T00:00:00Z

Links: CVE-2011-4080 - Bugzilla