ieee802154create in net/ieee802154/socket.c in the AFIEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.
[
{
"id": "CVE-2019-17053-4a477501",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"78538855200923198750212834383979367916",
"73946745412808773750308879417585056602",
"290838323390697251236400140096486126085",
"82007737957449474696714222965780994261"
]
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@e69dbd4619e7674c1679cba49afd9dd9ac347eef",
"signature_type": "Line",
"target": {
"file": "net/ieee802154/socket.c"
}
},
{
"id": "CVE-2019-17053-a99b39a4",
"signature_version": "v1",
"digest": {
"function_hash": "290938110195641840044965415570357550829",
"length": 937.0
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@e69dbd4619e7674c1679cba49afd9dd9ac347eef",
"signature_type": "Function",
"target": {
"file": "net/ieee802154/socket.c",
"function": "ieee802154_create"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-17053.json"