CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 3.6
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: hwinfo amd64 kernel driver version 8.98 and lower allows an unprivileged user to send ioctl 0x85fe2608 to the device driver with the hwinfo32 symbolic device name, resulting in direct physical memory read or write.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/NONE
Published Date: 2018-05-10
Last Modified Date: 2018-06-13