drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernelUpgrade kernel-headers | Dec 1, 2016 | May 3, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 3, 2011 |
| Suse | — | Upgrade kernel-smpUpgrade kernel-defaultUpgrade kernel-bigsmpUpgrade kernel-xenpaeUpgrade kernel-kdumpUpgrade kernel-kdumppaeUpgrade kernel-ppc64Upgrade kernel-vmipaeUpgrade kernel-iseries64Upgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-vmiUpgrade kernel-debugUpgrade kernel-syms | Feb 17, 2015 | May 3, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.32-33-virtualUpgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.32-33-sparc64-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.32-33-lpiaUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-33-preemptUpgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-33-powerpc64-smpUpgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-30-generic | Nov 8, 2024 | May 3, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESXi 3.5 to build number 604481Upgrade VMware ESX 3.5 to build number 604481Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | May 3, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | May 3, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub