CVE-2011-2906

Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a…

published May 24, 2012

CVSS
—
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a denial of service (memory consumption or memory corruption) via a negative size value in an ioctl call. NOTE: this may be a vulnerability only in unusual environments that provide a privileged program for obtaining the required file descriptor.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00477 · 39.9th percentile
Published
2012-05-24T00:00Z
EPSS history
Timeline
  • 24 MAY 00:00Z
    Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a…
    cvelistv5