Cross site request forgery (csrf)

2011-01-0320:00:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

JSON

The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4163.

CPENameOperatorVersion
linux_kerneleq2.6.37 rc4
linux_kerneleq2.6.37 rc2
linux_kerneleq2.6.37 rc6
linux_kerneleq2.6.37 rc5
linux_kerneleq2.6.37 rc1
linux_kerneleq2.6.37 rc3
linux_kernellt2.6.37
linux_kerneleq2.6.37

Name	Operator	Version
linux_kernel	eq	2.6.37 rc4
linux_kernel	eq	2.6.37 rc2
linux_kernel	eq	2.6.37 rc6
linux_kernel	eq	2.6.37 rc5
linux_kernel	eq	2.6.37 rc1
linux_kernel	eq	2.6.37 rc3
linux_kernel	lt	2.6.37
linux_kernel	eq	2.6.37