|Date: (C)2013-02-18 (M)2016-07-22|
|CVSS Score: 6.2||Access Vector: LOCAL|
|Exploitability Subscore: 1.9||Access Complexity: HIGH|
|Impact Subscore: 10.0||Authentication: NONE|
| ||Confidentiality: COMPLETE|
| ||Integrity: COMPLETE|
| ||Availability: COMPLETE|
The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c.