CVE ID:	CVE-2005-1264
Description:	Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1264 13651 http://www.securityfocus.com/bid/13651 20050516 Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html 20050517 Re: Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html ADV-2005-0557 http://www.vupen.com/english/advisories/2005/0557 FLSA:157459-3 http://www.securityfocus.com/archive/1/427980/100/0/threaded RHSA-2005:420 http://www.redhat.com/support/errata/RHSA-2005-420.html [linux-kernel] 20050517 [PATCH] Fix root hole in raw device http://marc.info/?l=linux-kernel&m=111630512512222 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10 oval:org.mitre.oval:def:10264 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10264