The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-PAE-develUpgrade python-perfUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-xen-develUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-firmwareUpgrade kernel-devel | Dec 1, 2016 | Jul 3, 2012 |
| Debian | — | Upgrade libguestfs | Jul 30, 2024 | Jul 3, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 3, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 22, 2011 |
| Suse | — | Upgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-symsUpgrade kernel-default-baseUpgrade xen-kmp-defaultUpgrade kernel-ec2-baseUpgrade kernel-ppc64Upgrade kernel-ppc64-develUpgrade kernel-xen-extraUpgrade kernel-ppc64-baseUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-trace-extraUpgrade kernel-xen-develUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-trace-develUpgrade kernel-ec2Upgrade xen-kmp-paeUpgrade kernel-xenUpgrade kernel-defaultUpgrade kernel-default-manUpgrade xen-kmp-traceUpgrade kernel-ec2-develUpgrade kernel-pae-baseUpgrade kernel-paeUpgrade kernel-pae-develUpgrade kernel-docsUpgrade kernel-pae-extra | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-39-ia64Upgrade linux-image-3.0.0-16-serverUpgrade linux-image-3.0.0-16-omapUpgrade linux-image-2.6.32-39-generic-paeUpgrade linux-image-3.0.0-16-powerpc64-smpUpgrade linux-image-2.6.32-39-386Upgrade linux-image-2.6.32-39-versatileUpgrade linux-image-3.0.0-16-powerpc-smpUpgrade linux-image-2.6.32-39-powerpc64-smpUpgrade linux-image-2.6.32-39-powerpcUpgrade linux-image-2.6.32-39-sparc64-smpUpgrade linux-image-2.6.32-39-genericUpgrade linux-image-2.6.32-343-ec2Upgrade linux-image-2.6.32-39-serverUpgrade linux-image-2.6.32-39-virtualUpgrade linux-image-3.0.0-16-powerpcUpgrade linux-image-3.0.0-16-generic-paeUpgrade linux-image-3.0.0-16-virtualUpgrade linux-image-3.0.0-16-genericUpgrade linux-image-2.6.32-39-lpiaUpgrade linux-image-2.6.32-39-sparc64Upgrade linux-image-2.6.32-39-preemptUpgrade linux-image-2.6.32-39-powerpc-smp | Nov 8, 2024 | Jul 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub