drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-PAEUpgrade kernel-headers | Dec 1, 2016 | May 3, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 3, 2011 |
| Suse | — | Upgrade kernel-kdumppaeUpgrade kernel-smpUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-xenpaeUpgrade kernel-bigsmpUpgrade kernel-iseries64Upgrade kernel-vmiUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-vmipaeUpgrade kernel-ppc64 | Feb 17, 2015 | May 3, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-33-virtualUpgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.32-33-sparc64-smpUpgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-33-preemptUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.32-33-powerpc64-smpUpgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-33-lpiaUpgrade linux-image-2.6.38-10-versatile | Nov 8, 2024 | May 3, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 3.5 to build number 604481Upgrade VMware ESXi 3.5 to build number 604481 | Oct 20, 2011 | May 3, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | May 3, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub