NetSight
IP …
high7.3

CVE-2015-8962

Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a …

Impact

Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.85
from 3.3 before 3.10.107
from 3.12 before 3.12.70
from 3.13 before 3.16.40
from 3.17 before 3.18.54
from 3.19 before 4.4

Weakness classification

CWE-415

References