oss-sec mailing list archives

Re: CVE Request: more tight ioctl permissions in dl2k driver

From: Florian Weimer <fw () deneb enyo de>
Date: Sat, 05 May 2012 00:03:28 +0200

* Marcus Meissner:

Stephan Mueller reported lack of capable(CAP_NET_ADMIN) checks
in private ioctls in the dl2k network card driver.


Have you tested the driver with actual hardware under load?
The last time I tested it, it was not really usable.