The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4163.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jan 3, 2011 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-traceUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade kernel-pae-develUpgrade kernel-xen-develUpgrade kernel-paeUpgrade kernel-trace-develUpgrade kernel-trace-baseUpgrade kernel-ppc64Upgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade kernel-ppc64-baseUpgrade kernel-ppc64-develUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-docs | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-30-powerpc64-smpUpgrade linux-image-2.6.32-30-virtualUpgrade linux-image-2.6.35-28-virtualUpgrade linux-image-2.6.32-30-powerpcUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-30-serverUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-28-genericUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-30-386Upgrade linux-image-2.6.32-30-lpiaUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.35-28-powerpcUpgrade linux-image-2.6.32-30-generic-paeUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-30-ia64Upgrade linux-image-2.6.35-28-generic-paeUpgrade linux-image-2.6.32-30-preemptUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-30-sparc64-smpUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.35-28-omapUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-28-serverUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-30-sparc64Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-28-powerpc-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-28-powerpc64-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-30-powerpc-smpUpgrade linux-image-2.6.32-314-ec2Upgrade linux-image-2.6.32-30-genericUpgrade linux-image-2.6.32-30-versatileUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.35-28-versatile | Nov 8, 2024 | Jan 3, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub