Security Advisory

CVE-2015-4036

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-08-31 20:00:00
Last updated 2024-08-06 06:04:02
Assigner mitre
State PUBLISHED

Description

Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call. NOTE: the affected function was renamed to vhost_scsi_make_tpg before the vulnerability was announced.