The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | May 11, 2017 | Mar 20, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Mar 20, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 20, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 4, 2017 | Mar 16, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 3, 2017 | Mar 20, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-develUpgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2 | May 2, 2017 | Mar 20, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-78-powerpc-smpUpgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-4.10.0-21-generic-lpaeUpgrade linux-image-3.13.0-132-powerpc-e500mcUpgrade linux-image-4.10.0-21-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-4.4.0-78-generic-lpaeUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-4.4.0-78-genericUpgrade linux-image-awsUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-4.4.0-1017-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-132-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-78-powerpc-e500mcUpgrade linux-image-4.4.0-1055-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1058-snapdragonUpgrade linux-image-4.10.0-1005-raspi2Upgrade linux-image-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-4.4.0-78-powerpc64-embUpgrade linux-image-4.4.0-78-lowlatencyUpgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.10.0-21-lowlatencyUpgrade linux-image-4.4.0-1013-gkeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-78-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-132-powerpc-smp | May 18, 2017 | Mar 20, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub