drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2011-05-03T19:00:00

Updated: 2024-08-06T22:28:41.810Z

Reserved: 2011-03-21T00:00:00

Link: CVE-2011-1495

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-05-03T19:55:08.433

Modified: 2023-02-13T00:17:07.973

Link: CVE-2011-1495

cve-icon Redhat

Severity : Important

Publid Date: 2011-04-05T00:00:00Z

Links: CVE-2011-1495 - Bugzilla