CVE-2007-4308: Adaptec Aacraid Controller

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.

Affected products

• Adaptec Aacraid Controller: any version

Published 2007-08-13. Last modified 2026-06-16.