CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Permissions Privileges and Access Controls
Summary: the acpi subsystem in the linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom acpi method in the acpi interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2010-12-22
Last Modified Date: 2017-08-17