The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-linux | Oct 20, 2016 | Oct 16, 2016 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-kernelhuawei-euleros-2_0_sp2-upgrade-kernel-debughuawei-euleros-2_0_sp2-upgrade-kernel-debug-develhuawei-euleros-2_0_sp2-upgrade-kernel-debuginfohuawei-euleros-2_0_sp2-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp2-upgrade-kernel-develhuawei-euleros-2_0_sp2-upgrade-kernel-headershuawei-euleros-2_0_sp2-upgrade-kernel-toolshuawei-euleros-2_0_sp2-upgrade-kernel-tools-libshuawei-euleros-2_0_sp2-upgrade-perfhuawei-euleros-2_0_sp2-upgrade-python-perf | Dec 4, 2019 | Oct 16, 2016 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-kernelhuawei-euleros-2_0_sp3-upgrade-kernel-debuginfohuawei-euleros-2_0_sp3-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp3-upgrade-kernel-develhuawei-euleros-2_0_sp3-upgrade-kernel-headershuawei-euleros-2_0_sp3-upgrade-kernel-toolshuawei-euleros-2_0_sp3-upgrade-kernel-tools-libshuawei-euleros-2_0_sp3-upgrade-perfhuawei-euleros-2_0_sp3-upgrade-python-perf | Dec 18, 2019 | Oct 16, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-kernel-uek | Apr 4, 2017 | Sep 15, 2016 |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Sep 15, 2016 |
| Suse | — | suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-cluster-network-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-defaultsuse-upgrade-kernel-docssuse-upgrade-kernel-ec2suse-upgrade-kernel-ec2-develsuse-upgrade-kernel-ec2-extrasuse-upgrade-kernel-obs-buildsuse-upgrade-ocfs2-kmp-default | Oct 22, 2016 | Oct 16, 2016 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-103-genericubuntu-upgrade-linux-image-3-13-0-103-generic-lpaeubuntu-upgrade-linux-image-3-13-0-103-lowlatencyubuntu-upgrade-linux-image-3-13-0-103-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-103-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-103-powerpc-smpubuntu-upgrade-linux-image-3-13-0-103-powerpc64-embubuntu-upgrade-linux-image-3-13-0-103-powerpc64-smpubuntu-upgrade-linux-image-3-2-0-116-genericubuntu-upgrade-linux-image-3-2-0-116-generic-paeubuntu-upgrade-linux-image-3-2-0-116-highbankubuntu-upgrade-linux-image-3-2-0-116-omapubuntu-upgrade-linux-image-3-2-0-116-powerpc-smpubuntu-upgrade-linux-image-3-2-0-116-powerpc64-smpubuntu-upgrade-linux-image-3-2-0-116-virtualubuntu-upgrade-linux-image-3-2-0-1494-omap4ubuntu-upgrade-linux-image-4-4-0-1038-raspi2ubuntu-upgrade-linux-image-4-4-0-1042-snapdragonubuntu-upgrade-linux-image-4-4-0-51-genericubuntu-upgrade-linux-image-4-4-0-51-generic-lpaeubuntu-upgrade-linux-image-4-4-0-51-lowlatencyubuntu-upgrade-linux-image-4-4-0-51-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-51-powerpc-smpubuntu-upgrade-linux-image-4-4-0-51-powerpc64-embubuntu-upgrade-linux-image-4-4-0-51-powerpc64-smpubuntu-upgrade-linux-image-4-8-0-1021-raspi2ubuntu-upgrade-linux-image-4-8-0-28-genericubuntu-upgrade-linux-image-4-8-0-28-generic-lpaeubuntu-upgrade-linux-image-4-8-0-28-lowlatencyubuntu-upgrade-linux-image-4-8-0-28-powerpc-e500mcubuntu-upgrade-linux-image-4-8-0-28-powerpc-smpubuntu-upgrade-linux-image-4-8-0-28-powerpc64-embubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-generic-paeubuntu-upgrade-linux-image-highbankubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-omapubuntu-upgrade-linux-image-omap4ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-lts-xenial | Dec 1, 2016 | Oct 16, 2016 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub