Security Advisory

CVE-2011-1494

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2011-05-03 19:00:00
Last updated 2024-08-06 22:28:41
Assigner redhat
State PUBLISHED

Description

Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.