The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-07-03T16:00:00

Updated: 2024-08-07T00:01:51.159Z

Reserved: 2011-10-18T00:00:00

Link: CVE-2011-4127

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-07-03T16:40:31.350

Modified: 2023-02-13T01:21:31.223

Link: CVE-2011-4127

cve-icon Redhat

Severity : Important

Publid Date: 2011-12-22T00:00:00Z

Links: CVE-2011-4127 - Bugzilla