PT-2015-7046 · Linux+3 · Linux Kernel+3
Adam Mariš
·
Published
2015-08-03
·
Updated
2020-06-02
·
CVE-2015-5707
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.6.x through 4.x before 4.1
Description
The issue is related to an integer overflow in the
sg start req function, which can be triggered by a large iov count value in a write request. This can cause a denial of service or possibly have other unspecified impacts. The estimated number of potentially affected devices is not provided.Recommendations
For Linux kernel versions 2.6.x through 4.x before 4.1, update to version 4.1 or later to resolve the issue.
At the moment, there is no other information about additional mitigation measures for this specific issue.
Exploit
Fix
DoS
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linux Kernel
Suse
Ubuntu