The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 20, 2016 | Oct 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2019 | Oct 16, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libs | Dec 18, 2019 | Oct 16, 2016 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 4, 2017 | Sep 15, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 15, 2016 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-build | Oct 22, 2016 | Oct 16, 2016 |
| Ubuntu | — | Upgrade linux-image-4.8.0-28-powerpc64-embUpgrade linux-image-3.13.0-103-genericUpgrade linux-image-4.8.0-28-powerpc-e500mcUpgrade linux-image-4.4.0-51-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-103-powerpc-e500Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.8.0-28-lowlatencyUpgrade linux-image-3.2.0-116-virtualUpgrade linux-image-4.4.0-51-lowlatencyUpgrade linux-image-3.2.0-116-omapUpgrade linux-image-4.4.0-51-powerpc-smpUpgrade linux-image-3.13.0-103-powerpc-smpUpgrade linux-image-3.2.0-116-generic-paeUpgrade linux-image-powerpc-smpUpgrade linux-image-3.2.0-116-powerpc-smpUpgrade linux-image-3.13.0-103-powerpc64-smpUpgrade linux-image-4.4.0-1042-snapdragonUpgrade linux-image-3.2.0-116-highbankUpgrade linux-image-3.13.0-103-powerpc-e500mcUpgrade linux-image-4.4.0-51-powerpc-e500mcUpgrade linux-image-4.8.0-1021-raspi2Upgrade linux-image-3.2.0-116-genericUpgrade linux-image-4.4.0-51-powerpc64-smpUpgrade linux-image-3.13.0-103-generic-lpaeUpgrade linux-image-omapUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-paeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-103-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.8.0-28-powerpc-smpUpgrade linux-image-4.4.0-51-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-4.8.0-28-genericUpgrade linux-image-4.4.0-51-powerpc64-embUpgrade linux-image-highbankUpgrade linux-image-4.8.0-28-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-3.2.0-1494-omap4Upgrade linux-image-3.13.0-103-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.2.0-116-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-omap4Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1038-raspi2 | Dec 1, 2016 | Oct 16, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub