2024-05-26 14:27:05 +02:00
### [CVE-2013-6383](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6383)

2025-09-29 21:09:30 +02:00


2024-05-26 14:27:05 +02:00
### Description
The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capability, which allows local users to bypass intended access restrictions via a crafted ioctl call.
### POC
#### Reference
2025-09-29 21:09:30 +02:00
- http://www.ubuntu.com/usn/USN-2067-1
- http://www.ubuntu.com/usn/USN-2070-1
- http://www.ubuntu.com/usn/USN-2074-1
2024-05-26 14:27:05 +02:00
- http://www.ubuntu.com/usn/USN-2076-1
#### Github
No PoCs found on GitHub currently.