Description
Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.
Published: 2011-05-03
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-2240-1 linux-2.6 security update
EUVD EUVD EUVD-2011-1497 Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.
Ubuntu USN Ubuntu USN USN-1159-1 Linux kernel vulnerabilities (Marvell Dove)
Ubuntu USN Ubuntu USN USN-1160-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1161-1 Linux kernel vulnerabilities (EC2)
Ubuntu USN Ubuntu USN USN-1162-1 Linux kernel vulnerabilities (Marvell Dove)
Ubuntu USN Ubuntu USN USN-1164-1 Linux kernel vulnerabilities (i.MX51)
Ubuntu USN Ubuntu USN USN-1167-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1168-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1187-1 Linux kernel (Maverick backport) vulnerabilities
Ubuntu USN Ubuntu USN USN-1202-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1212-1 Linux kernel (OMAP4) vulnerabilities
History

No history.

Subscriptions

Linux Linux Kernel
Redhat Enterprise Linux Enterprise Mrg Rhel Eus
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-06T22:28:41.770Z

Reserved: 2011-03-21T00:00:00.000Z

Link: CVE-2011-1494

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-05-03T19:55:08.387

Modified: 2026-04-29T01:13:23.040

Link: CVE-2011-1494

cve-icon Redhat

Severity : Important

Publid Date: 2011-04-05T00:00:00Z

Links: CVE-2011-1494 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses