CVE-2011-1495

kernel: drivers/scsi/mpt2sas: prevent heap overflows

Published May 3, 2011 CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Description
drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2240-1 linux-2.6 security update
EUVD EUVD EUVD-2011-1498 drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.
Ubuntu USN Ubuntu USN USN-1159-1 Linux kernel vulnerabilities (Marvell Dove)
Ubuntu USN Ubuntu USN USN-1160-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1161-1 Linux kernel vulnerabilities (EC2)
Ubuntu USN Ubuntu USN USN-1162-1 Linux kernel vulnerabilities (Marvell Dove)
Ubuntu USN Ubuntu USN USN-1164-1 Linux kernel vulnerabilities (i.MX51)
Ubuntu USN Ubuntu USN USN-1167-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1168-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1187-1 Linux kernel (Maverick backport) vulnerabilities
Ubuntu USN Ubuntu USN USN-1202-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1212-1 Linux kernel (OMAP4) vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 10:28 PM
Reserved
Mar 21, 2011, 12:00 AM
Status
Modified
Published
May 3, 2011, 7:55 PM
Modified
Jun 16, 2026, 11:29 PM
Severity
Important
Public date
Apr 5, 2011, 12:00 AM