NetSight
IP …
medium6.0

CVE-2013-2851

Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveragin…

Impact

Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.9.4
Versions 3.9, 3.9.0, 3.9.1, 3.9.2, 3.9.3

Weakness classification

CWE-134

References