The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does not properly validate a certain size value, which allows local users to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via an FSACTL_SEND_RAW_SRB ioctl call that triggers a crafted SRB command.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Nov 12, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 27, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 22, 2013 |
| Suse | — | Upgrade ocfs2-kmp-bigsmpUpgrade iscsitarget-kmp-rtUpgrade ofed-kmp-rtUpgrade kernel-sourceUpgrade gfs2-kmp-traceUpgrade ocfs2-kmp-ppc64Upgrade cluster-network-kmp-paeUpgrade drbd-kmp-rtUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade iscsitarget-kmp-rt_traceUpgrade cluster-network-kmp-xenUpgrade kernel-bigsmp-baseUpgrade kernel-debugUpgrade kernel-trace-baseUpgrade gfs2-kmp-ppc64Upgrade gfs2-kmp-paeUpgrade kernel-traceUpgrade kernel-vanilla-develUpgrade kernel-xenUpgrade kernel-rt-baseUpgrade kernel-xen-extraUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-rtUpgrade kernel-desktop-develUpgrade kernel-default-develUpgrade xen-kmp-traceUpgrade kernel-debug-baseUpgrade kernel-rt_traceUpgrade ocfs2-kmp-rt_traceUpgrade kernel-develUpgrade xen-kmp-defaultUpgrade kernel-ppc64Upgrade cluster-network-kmp-traceUpgrade kernel-trace-extraUpgrade sle-hae-releaseUpgrade kernel-ppc64-develUpgrade ofed-kmp-rt_traceUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-xenUpgrade kernel-rt_trace-baseUpgrade kernel-source-rtUpgrade xen-kmp-paeUpgrade cluster-network-kmp-bigsmpUpgrade kernel-paeUpgrade kernel-vanillaUpgrade kernel-pae-baseUpgrade kernel-bigsmpUpgrade kernel-docsUpgrade kernel-desktop-baseUpgrade kernel-trace-develUpgrade kernel-xen-develUpgrade kernel-ec2Upgrade ocfs2-kmp-traceUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-symsUpgrade drbd-kmp-rt_traceUpgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade kernel-default-manUpgrade cluster-network-kmp-rt_traceUpgrade kernel-rt-develUpgrade kernel-xen-baseUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-ec2-develUpgrade kernel-syms-rtUpgrade cluster-network-kmp-defaultUpgrade cluster-network-kmp-ppc64Upgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-desktopUpgrade kernel-rt_trace-develUpgrade ocfs2-kmp-paeUpgrade ocfs2-kmp-rtUpgrade kernel-pae-develUpgrade gfs2-kmp-bigsmpUpgrade lttng-modules-kmp-rtUpgrade ocfs2-kmp-xenUpgrade kernel-ec2-baseUpgrade kernel-debug-develUpgrade kernel-bigsmp-develUpgrade kernel-pae-extra | Jan 31, 2014 | Nov 26, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-57-serverUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-3.11.0-15-generic-lpaeUpgrade linux-image-3.5.0-46-genericUpgrade linux-image-2.6.32-57-ia64Upgrade linux-image-3.11.0-15-genericUpgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-2.6.32-362-ec2Upgrade linux-image-3.2.0-59-omapUpgrade linux-image-2.6.32-57-virtualUpgrade linux-image-2.6.32-57-versatileUpgrade linux-image-3.2.0-59-genericUpgrade linux-image-3.5.0-46-powerpc-smpUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-3.2.0-59-highbankUpgrade linux-image-2.6.32-57-preemptUpgrade linux-image-3.5.0-46-omapUpgrade linux-image-2.6.32-57-lpiaUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-3.5.0-238-omap4Upgrade linux-image-3.5.0-46-powerpc64-smpUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-3.8.0-37-genericUpgrade linux-image-2.6.32-57-386Upgrade linux-image-3.5.0-46-highbankUpgrade linux-image-2.6.32-57-generic | Nov 8, 2024 | Nov 27, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub