CVE-2011-1494

kernel: drivers/scsi/mpt2sas: prevent heap overflows

Published May 3, 2011 CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Description
Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2240-1 linux-2.6 security update
EUVD EUVD EUVD-2011-1497 Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.
Ubuntu USN Ubuntu USN USN-1159-1 Linux kernel vulnerabilities (Marvell Dove)
Ubuntu USN Ubuntu USN USN-1160-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1161-1 Linux kernel vulnerabilities (EC2)
Ubuntu USN Ubuntu USN USN-1162-1 Linux kernel vulnerabilities (Marvell Dove)
Ubuntu USN Ubuntu USN USN-1164-1 Linux kernel vulnerabilities (i.MX51)
Ubuntu USN Ubuntu USN USN-1167-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1168-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1187-1 Linux kernel (Maverick backport) vulnerabilities
Ubuntu USN Ubuntu USN USN-1202-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1212-1 Linux kernel (OMAP4) vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 10:28 PM
Reserved
Mar 21, 2011, 12:00 AM
Status
Modified
Published
May 3, 2011, 7:55 PM
Modified
Jun 16, 2026, 11:29 PM
Severity
Important
Public date
Apr 5, 2011, 12:00 AM