NetSight
IP …
medium4.6

CVE-2012-4542

block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local u…

Impact

block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SG_IO ioctl call that leverages overlapping opcodes.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.8.0
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4

Weakness classification

CWE-264

References