Security Advisory

CVE-2011-4127

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-07-03 16:00:00

Last updated 2024-08-07 00:01:51

Assigner redhat

State PUBLISHED

Description

The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.

← Browse all CVEs View on cve.org ↗