NetSight
IP …
high7.8

CVE-2016-7425

The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allo…

Impact

The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.2 before 3.2.84
from 3.3 before 3.10.105
from 3.11 before 3.12.67
from 3.13 before 3.16.39
from 3.17 before 3.18.46
from 3.19 before 4.1.37
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 16.10

Weakness classification

CWE-119

References