CVE Feed

    Dashboard / CVE / CVE-2009-3939

    CVE-2009-3939

    The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.

    Published:Sep 28, 2009
    Last Modified:Apr 23, 2026
    EPS:Nov 16, 2009
    EPSS Score:0.00044
    CVSS Score:7.1

    Affected Products

    Vendor
    Avaya
    Product
    Aura Application Enablement Services
    Vendor
    Avaya
    Product
    Aura Communication Manager
    Vendor
    Avaya
    Product
    Aura Session Manager
    Vendor
    Avaya
    Product
    Aura Sip Enablement Services
    Vendor
    Avaya
    Product
    Aura System Manager
    Vendor
    Avaya
    Product
    Aura System Platform
    Vendor
    Avaya
    Product
    Voice Portal
    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Opensuse
    Product
    Opensuse
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Enterprise Linux Eus
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation
    Vendor
    Redhat
    Product
    Enterprise Mrg
    Vendor
    Redhat
    Product
    Virtualization
    Vendor
    Suse
    Product
    Linux Enterprise Desktop
    Vendor
    Suse
    Product
    Linux Enterprise Server

    Exploits

    https://bugzilla.redhat.com/show_bug.cgi?id=526068https://bugzilla.redhat.com/show_bug.cgi?id=526068

    References

    http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
    http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html
    http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html
    http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
    http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html
    http://osvdb.org/60201
    http://secunia.com/advisories/37909
    http://secunia.com/advisories/38017
    http://secunia.com/advisories/38276
    http://secunia.com/advisories/38492
    http://secunia.com/advisories/38779
    http://support.avaya.com/css/P8/documents/100073666
    http://www.debian.org/security/2010/dsa-1996
    http://www.openwall.com/lists/oss-security/2009/11/13/1
    http://www.securityfocus.com/bid/37019
    http://www.ubuntu.com/usn/usn-864-1
    https://bugzilla.redhat.com/show_bug.cgi?id=526068
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10310
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7540
    https://rhn.redhat.com/errata/RHSA-2010-0046.html
    https://rhn.redhat.com/errata/RHSA-2010-0095.html
    http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
    http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html
    http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html
    http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
    http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html
    http://osvdb.org/60201
    http://secunia.com/advisories/37909
    http://secunia.com/advisories/38017
    http://secunia.com/advisories/38276
    http://secunia.com/advisories/38492
    http://secunia.com/advisories/38779
    http://support.avaya.com/css/P8/documents/100073666
    http://www.debian.org/security/2010/dsa-1996
    http://www.openwall.com/lists/oss-security/2009/11/13/1
    http://www.securityfocus.com/bid/37019
    http://www.ubuntu.com/usn/usn-864-1
    https://bugzilla.redhat.com/show_bug.cgi?id=526068
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10310
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7540
    https://rhn.redhat.com/errata/RHSA-2010-0046.html
    https://rhn.redhat.com/errata/RHSA-2010-0095.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High