Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 31, 2017 | Nov 16, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 3, 2015 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-obs-build | Dec 9, 2016 | Nov 16, 2016 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-125-generic-lpaeUpgrade linux-image-3.13.0-125-powerpc64-smpUpgrade linux-image-3.13.0-125-powerpc-e500mcUpgrade linux-image-3.13.0-125-lowlatencyUpgrade linux-image-3.13.0-125-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-3.13.0-125-powerpc64-embUpgrade linux-image-3.13.0-125-powerpc-e500Upgrade linux-image-3.13.0-125-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-smp | Jul 21, 2017 | Nov 16, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub