Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copy_from_user and copy_to_user functions.
2005-03-07T05:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 3.6 (LOW)
AV:L/AC:L/Au:N/C:P/I:P/A:N
3.9
4.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | linux | linux_kernel | 2.6.0 | Yes |
Operating System | linux | linux_kernel | 2.6.0 | Yes |
Operating System | linux | linux_kernel | 2.6.0 | Yes |
Operating System | linux | linux_kernel | 2.6.0 | Yes |
Operating System | linux | linux_kernel | 2.6.0 | Yes |
Operating System | linux | linux_kernel | 2.6.0 | Yes |
Operating System | linux | linux_kernel | 2.6.0 | Yes |
Operating System | linux | linux_kernel | 2.6.0 | Yes |
Operating System | linux | linux_kernel | 2.6.0 | Yes |
Operating System | linux | linux_kernel | 2.6.0 | Yes |
Operating System | linux | linux_kernel | 2.6.0 | Yes |
Operating System | linux | linux_kernel | 2.6.0 | Yes |
Operating System | linux | linux_kernel | 2.6.1 | Yes |
Operating System | linux | linux_kernel | 2.6.1 | Yes |
Operating System | linux | linux_kernel | 2.6.1 | Yes |
Operating System | linux | linux_kernel | 2.6.2 | Yes |
Operating System | linux | linux_kernel | 2.6.3 | Yes |
Operating System | linux | linux_kernel | 2.6.4 | Yes |
Operating System | linux | linux_kernel | 2.6.5 | Yes |
Operating System | linux | linux_kernel | 2.6.6 | Yes |
Operating System | linux | linux_kernel | 2.6.6 | Yes |
Operating System | linux | linux_kernel | 2.6.7 | Yes |
Operating System | linux | linux_kernel | 2.6.7 | Yes |
Operating System | linux | linux_kernel | 2.6.8 | Yes |
Operating System | linux | linux_kernel | 2.6.8 | Yes |
Operating System | linux | linux_kernel | 2.6.8 | Yes |
Operating System | linux | linux_kernel | 2.6.8 | Yes |
Operating System | linux | linux_kernel | 2.6.8.1 | Yes |
Operating System | linux | linux_kernel | 2.6.9 | Yes |
Operating System | linux | linux_kernel | 2.6.10 | Yes |
Operating System | linux | linux_kernel | 2.6.10 | Yes |
Operating System | linux | linux_kernel | 2.6.11 | Yes |
Operating System | linux | linux_kernel | 2.6.11 | Yes |
Operating System | linux | linux_kernel | 2.6.11 | Yes |
Operating System | linux | linux_kernel | 2.6.11 | Yes |
Operating System | linux | linux_kernel | 2.6.11.1 | Yes |
Operating System | linux | linux_kernel | 2.6.11.2 | Yes |
Operating System | linux | linux_kernel | 2.6.11.3 | Yes |
Operating System | linux | linux_kernel | 2.6.11.4 | Yes |
Operating System | linux | linux_kernel | 2.6.11.5 | Yes |
Operating System | linux | linux_kernel | 2.6.11.6 | Yes |
Operating System | linux | linux_kernel | 2.6.11.7 | Yes |
Operating System | linux | linux_kernel | 2.6.11.8 | Yes |
Operating System | linux | linux_kernel | 2.6.12 | Yes |
Operating System | linux | linux_kernel | 2.6.12 | Yes |
Operating System | linux | linux_kernel | 2.6_test9_cvs | Yes |