The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity.
Privilege Escalation
Linux
Linux Kernel
Evergreen
Enterprise Linux Desktop
+4
NVD
VulDB
CVSS 2.0
2.1
EPSS
0.0%