The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 20, 2016 | Oct 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-headersUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfo | Dec 4, 2019 | Oct 16, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-tools | Dec 18, 2019 | Oct 16, 2016 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 4, 2017 | Sep 15, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 15, 2016 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-extra | Oct 22, 2016 | Oct 16, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-103-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.2.0-116-genericUpgrade linux-image-3.13.0-103-powerpc64-smpUpgrade linux-image-3.2.0-116-powerpc-smpUpgrade linux-image-3.13.0-103-genericUpgrade linux-image-4.4.0-51-generic-lpaeUpgrade linux-image-3.13.0-103-powerpc-e500Upgrade linux-image-omapUpgrade linux-image-generic-paeUpgrade linux-image-4.4.0-1042-snapdragonUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.8.0-1021-raspi2Upgrade linux-image-4.4.0-51-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.2.0-116-generic-paeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.2.0-116-virtualUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.2.0-116-omapUpgrade linux-image-4.8.0-28-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-51-powerpc-smpUpgrade linux-image-4.8.0-28-lowlatencyUpgrade linux-image-4.4.0-51-lowlatencyUpgrade linux-image-3.13.0-103-generic-lpaeUpgrade linux-image-4.4.0-51-powerpc64-smpUpgrade linux-image-3.13.0-103-powerpc-e500mcUpgrade linux-image-4.8.0-28-powerpc-e500mcUpgrade linux-image-3.2.0-116-highbankUpgrade linux-image-3.13.0-103-lowlatencyUpgrade linux-image-3.2.0-1494-omap4Upgrade linux-image-4.8.0-28-generic-lpaeUpgrade linux-image-4.4.0-51-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-omap4Upgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-51-genericUpgrade linux-image-3.2.0-116-powerpc64-smpUpgrade linux-image-4.8.0-28-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.8.0-28-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-3.13.0-103-powerpc64-embUpgrade linux-image-4.4.0-1038-raspi2Upgrade linux-image-highbankUpgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenial | Dec 1, 2016 | Oct 16, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub