Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call. NOTE: the affected function was renamed to vhost_scsi_make_tpg before the vulnerability was announced.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 31, 2015 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-obs-build | Dec 18, 2015 | Jul 31, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-54-powerpc64-smpUpgrade linux-image-3.13.0-54-powerpc64-embUpgrade linux-image-3.13.0-54-genericUpgrade linux-image-3.19.0-20-powerpc-smpUpgrade linux-image-3.19.0-20-lowlatencyUpgrade linux-image-3.19.0-20-genericUpgrade linux-image-3.16.0-34-lowlatencyUpgrade linux-image-3.16.0-34-powerpc64-smpUpgrade linux-image-3.16.0-34-genericUpgrade linux-image-3.13.0-54-lowlatencyUpgrade linux-image-3.13.0-54-powerpc-e500Upgrade linux-image-3.13.0-54-powerpc-smpUpgrade linux-image-3.16.0-34-powerpc-e500mcUpgrade linux-image-3.19.0-20-powerpc64-smpUpgrade linux-image-3.16.0-34-powerpc64-embUpgrade linux-image-3.19.0-20-generic-lpaeUpgrade linux-image-3.19.0-20-powerpc64-embUpgrade linux-image-3.16.0-34-generic-lpaeUpgrade linux-image-3.19.0-20-powerpc-e500mcUpgrade linux-image-3.13.0-54-powerpc-e500mcUpgrade linux-image-3.16.0-34-powerpc-smpUpgrade linux-image-3.13.0-54-generic-lpae | Nov 8, 2024 | Aug 31, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub