The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 20, 2016 | Oct 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debug-devel | Dec 4, 2019 | Oct 16, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Dec 18, 2019 | Oct 16, 2016 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 4, 2017 | Sep 15, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 15, 2016 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2Upgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-build | Oct 22, 2016 | Oct 16, 2016 |
| Ubuntu | — | Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-omap4Upgrade linux-image-4.4.0-51-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-4.8.0-28-powerpc-smpUpgrade linux-image-3.13.0-103-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-3.13.0-103-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-highbankUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-51-powerpc64-embUpgrade linux-image-3.2.0-1494-omap4Upgrade linux-image-4.8.0-28-genericUpgrade linux-image-4.8.0-28-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-3.2.0-116-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-1038-raspi2Upgrade linux-image-3.13.0-103-generic-lpaeUpgrade linux-image-3.2.0-116-virtualUpgrade linux-image-3.2.0-116-generic-paeUpgrade linux-image-3.2.0-116-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.2.0-116-omapUpgrade linux-image-4.4.0-1042-snapdragonUpgrade linux-image-4.4.0-51-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-4.8.0-28-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-generic-paeUpgrade linux-image-3.2.0-116-powerpc-smpUpgrade linux-image-4.4.0-51-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.2.0-116-highbankUpgrade linux-image-4.4.0-51-powerpc-e500mcUpgrade linux-image-4.8.0-28-powerpc-e500mcUpgrade linux-image-3.13.0-103-powerpc-e500mcUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-103-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.8.0-28-lowlatencyUpgrade linux-image-3.13.0-103-powerpc64-smpUpgrade linux-image-3.13.0-103-powerpc-e500Upgrade linux-image-3.13.0-103-powerpc-smpUpgrade linux-image-4.4.0-51-lowlatencyUpgrade linux-image-4.8.0-1021-raspi2Upgrade linux-image-omapUpgrade linux-image-4.4.0-51-powerpc-smp | Dec 1, 2016 | Oct 16, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub