NetSight
IP …
low2.3

CVE-2014-4027

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, wh…

Impact

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.14
RedhatEnterprise Linux
Version 6.0
CanonicalUbuntu Linux
Version 12.04
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise High Availability Extension
Version 11
SuseLinux Enterprise Real Time Extension
Version 11
SuseLinux Enterprise Server
Version 11
F5Big-Ip Access Policy Manager
from 11.1.0 through 11.6.0
Version 12.0.0
F5Big-Ip Advanced Firewall Manager
from 11.3.0 through 11.6.0
Version 12.0.0
F5Big-Ip Analytics
from 11.1.0 through 11.6.0
Version 12.0.0
F5Big-Ip Application Acceleration Manager
from 11.4.0 through 11.6.0
Version 12.0.0
F5Big-Ip Application Security Manager
from 11.1.0 through 11.6.0
Version 12.0.0

Weakness classification

CWE-200

References