The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does not properly validate a certain size value, which allows local users to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via an FSACTL_SEND_RAW_SRB ioctl call that triggers a crafted SRB command.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Nov 12, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 27, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 22, 2013 |
| Suse | — | Upgrade kernel-vanilla-develUpgrade cluster-network-kmp-rtUpgrade iscsitarget-kmp-rtUpgrade cluster-network-kmp-xenUpgrade cluster-network-kmp-bigsmpUpgrade xen-kmp-paeUpgrade kernel-default-develUpgrade kernel-paeUpgrade cluster-network-kmp-traceUpgrade ofed-kmp-rtUpgrade kernel-debug-baseUpgrade sle-hae-releaseUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-trace-extraUpgrade kernel-trace-baseUpgrade xen-kmp-traceUpgrade kernel-rt_trace-baseUpgrade kernel-desktop-develUpgrade gfs2-kmp-paeUpgrade kernel-rt_traceUpgrade kernel-develUpgrade kernel-source-rtUpgrade iscsitarget-kmp-rt_traceUpgrade gfs2-kmp-xenUpgrade gfs2-kmp-ppc64Upgrade ocfs2-kmp-ppc64Upgrade ocfs2-kmp-bigsmpUpgrade kernel-xen-extraUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-xenUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade xen-kmp-defaultUpgrade ocfs2-kmp-rt_traceUpgrade kernel-ppc64-develUpgrade drbd-kmp-rtUpgrade kernel-rt-baseUpgrade ofed-kmp-rt_traceUpgrade gfs2-kmp-traceUpgrade cluster-network-kmp-paeUpgrade kernel-ppc64Upgrade kernel-traceUpgrade kernel-bigsmp-baseUpgrade kernel-debug-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-desktopUpgrade kernel-desktop-baseUpgrade kernel-pae-baseUpgrade ocfs2-kmp-traceUpgrade kernel-bigsmpUpgrade cluster-network-kmp-rt_traceUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade drbd-kmp-rt_traceUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-ec2-develUpgrade kernel-default-manUpgrade ocfs2-kmp-paeUpgrade kernel-default-extraUpgrade kernel-pae-develUpgrade kernel-rt_trace-develUpgrade kernel-trace-develUpgrade kernel-pae-extraUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-bigsmp-develUpgrade kernel-ec2-baseUpgrade lttng-modules-kmp-rtUpgrade gfs2-kmp-bigsmpUpgrade cluster-network-kmp-defaultUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade cluster-network-kmp-ppc64Upgrade kernel-ppc64-baseUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade kernel-ec2Upgrade kernel-vanillaUpgrade ocfs2-kmp-xen | Jan 31, 2014 | Nov 26, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-46-highbankUpgrade linux-image-3.5.0-46-powerpc64-smpUpgrade linux-image-3.5.0-46-omapUpgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-2.6.32-57-386Upgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-2.6.32-57-genericUpgrade linux-image-3.2.0-59-highbankUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-2.6.32-57-lpiaUpgrade linux-image-3.5.0-238-omap4Upgrade linux-image-3.8.0-37-genericUpgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-2.6.32-57-preemptUpgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-3.11.0-15-generic-lpaeUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-3.2.0-59-omapUpgrade linux-image-2.6.32-362-ec2Upgrade linux-image-2.6.32-57-virtualUpgrade linux-image-2.6.32-57-ia64Upgrade linux-image-3.5.0-46-powerpc-smpUpgrade linux-image-3.5.0-46-genericUpgrade linux-image-3.11.0-15-genericUpgrade linux-image-2.6.32-57-versatileUpgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-3.2.0-59-genericUpgrade linux-image-2.6.32-57-server | Nov 8, 2024 | Nov 27, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub