Find real vulnerabilities before they ship
The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d04e696fe.
Base Score
4.1
| Base Score | 4.1 |
|---|---|
| Vector String | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N |
| Base Severity | Medium |
| Version | 3.1 |
| Attack Vector (AV) | LOCAL |
