The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 20, 2016 | Oct 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel | Dec 4, 2019 | Oct 16, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perf | Dec 18, 2019 | Oct 16, 2016 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 4, 2017 | Sep 15, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 15, 2016 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ec2-develUpgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-extra | Oct 22, 2016 | Oct 16, 2016 |
| Ubuntu | — | Upgrade linux-image-4.8.0-28-powerpc64-embUpgrade linux-image-4.8.0-28-powerpc-e500mcUpgrade linux-image-3.13.0-103-powerpc-smpUpgrade linux-image-3.13.0-103-powerpc-e500Upgrade linux-image-4.4.0-51-generic-lpaeUpgrade linux-image-3.2.0-116-powerpc-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-paeUpgrade linux-image-3.13.0-103-genericUpgrade linux-image-4.8.0-1021-raspi2Upgrade linux-image-4.4.0-51-lowlatencyUpgrade linux-image-3.13.0-103-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-51-powerpc64-smpUpgrade linux-image-omapUpgrade linux-image-4.8.0-28-lowlatencyUpgrade linux-image-4.4.0-51-powerpc-e500mcUpgrade linux-image-3.2.0-116-highbankUpgrade linux-image-4.4.0-1042-snapdragonUpgrade linux-image-4.4.0-51-powerpc-smpUpgrade linux-image-3.2.0-116-generic-paeUpgrade linux-image-3.2.0-116-virtualUpgrade linux-image-3.2.0-116-omapUpgrade linux-image-3.13.0-103-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-3.2.0-116-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-103-powerpc-e500mcUpgrade linux-image-3.2.0-1494-omap4Upgrade linux-image-4.4.0-1038-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-4.8.0-28-genericUpgrade linux-image-4.8.0-28-generic-lpaeUpgrade linux-image-4.8.0-28-powerpc-smpUpgrade linux-image-4.4.0-51-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.2.0-116-powerpc64-smpUpgrade linux-image-omap4Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-51-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-103-powerpc64-embUpgrade linux-image-highbankUpgrade linux-image-3.13.0-103-lowlatency | Dec 1, 2016 | Oct 16, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub