The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service (kernel OOPS and NULL pointer dereference), as demonstrated by using xcdroast to duplicate a CD. NOTE: this is only exploitable by users who can open the cdrom device.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-itanium-smp | Nov 8, 2024 | Sep 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub