Denial Of Service (DoS)

2019-01-1509:16:46

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

Linux kernel is vulnerable to denial of service. It was found that the blk_rq_map_user_iov() function in the Linux kernel’s block device implementation did not properly restrict the type of iterator, which could allow a local attacker to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging write access to a /dev/sg device.

CPENameOperatorVersion
kerneleq2.6.32__358.123.4.openstack.el6
kerneleq2.6.32__279.5.2.el6
kerneleq2.6.32__279.5.1.el6
kerneleq2.6.32__504.8.1.el6
kerneleq2.6.32__642.6.2.el6
kerneleq2.6.32__358.6.1.el6
kerneleq2.6.32__431.40.2.el6
kerneleq2.6.32__358.0.1.el6
kerneleq2.6.32__358.111.1.openstack.el6
kerneleq2.6.32__642.3.1.el6

Name	Operator	Version
kernel	eq	2.6.32__358.123.4.openstack.el6
kernel	eq	2.6.32__279.5.2.el6
kernel	eq	2.6.32__279.5.1.el6
kernel	eq	2.6.32__504.8.1.el6
kernel	eq	2.6.32__642.6.2.el6
kernel	eq	2.6.32__358.6.1.el6
kernel	eq	2.6.32__431.40.2.el6
kernel	eq	2.6.32__358.0.1.el6
kernel	eq	2.6.32__358.111.1.openstack.el6
kernel	eq	2.6.32__642.3.1.el6