Total vulnerabilities in the database
Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copy_from_user and copy_to_user functions.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 2.6.11-rc3 | 2.6.11-rc3.x |
| linux / linux_kernel | 2.6.11 | 2.6.11.x |
| linux / linux_kernel | 2.6.12-rc1 | 2.6.12-rc1.x |
| linux / linux_kernel | 2.6.12-rc4 | 2.6.12-rc4.x |
| linux / linux_kernel | 2.6.11.2 | 2.6.11.2.x |
| linux / linux_kernel | 2.6.5 | 2.6.5.x |
| linux / linux_kernel | 2.6.1 | 2.6.1.x |
| linux / linux_kernel | 2.6.11.8 | 2.6.11.8.x |
| linux / linux_kernel | 2.6.10 | 2.6.10.x |
| linux / linux_kernel | 2.6.11.6 | 2.6.11.6.x |
| linux / linux_kernel | 2.6.0-test5 | 2.6.0-test5.x |
| linux / linux_kernel | 2.6.3 | 2.6.3.x |
| linux / linux_kernel | 2.6.0-test2 | 2.6.0-test2.x |
| linux / linux_kernel | 2.6.4 | 2.6.4.x |
| linux / linux_kernel | 2.6_test9_cvs | 2.6_test9_cvs.x |
| linux / linux_kernel | 2.6.11.5 | 2.6.11.5.x |
| linux / linux_kernel | 2.6.7-rc1 | 2.6.7-rc1.x |
| linux / linux_kernel | 2.6.2 | 2.6.2.x |
| linux / linux_kernel | 2.6.8-rc1 | 2.6.8-rc1.x |
| linux / linux_kernel | 2.6.0-test11 | 2.6.0-test11.x |
| linux / linux_kernel | 2.6.1-rc2 | 2.6.1-rc2.x |
| linux / linux_kernel | 2.6.11-rc4 | 2.6.11-rc4.x |
| linux / linux_kernel | 2.6.8 | 2.6.8.x |
| linux / linux_kernel | 2.6.0-test1 | 2.6.0-test1.x |
| linux / linux_kernel | 2.6.0-test6 | 2.6.0-test6.x |
| linux / linux_kernel | 2.6.10-rc2 | 2.6.10-rc2.x |
| linux / linux_kernel | 2.6.0-test4 | 2.6.0-test4.x |
| linux / linux_kernel | 2.6.0 | 2.6.0.x |
| linux / linux_kernel | 2.6.0-test10 | 2.6.0-test10.x |
| linux / linux_kernel | 2.6.0-test9 | 2.6.0-test9.x |
| linux / linux_kernel | 2.6.11.3 | 2.6.11.3.x |
| linux / linux_kernel | 2.6.7 | 2.6.7.x |
| linux / linux_kernel | 2.6.11-rc2 | 2.6.11-rc2.x |
| linux / linux_kernel | 2.6.1-rc1 | 2.6.1-rc1.x |
| linux / linux_kernel | 2.6.6-rc1 | 2.6.6-rc1.x |
| linux / linux_kernel | 2.6.9-2.6.20 | 2.6.9-2.6.20.x |
| linux / linux_kernel | 2.6.11.7 | 2.6.11.7.x |
| linux / linux_kernel | 2.6.0-test7 | 2.6.0-test7.x |
| linux / linux_kernel | 2.6.8.1 | 2.6.8.1.x |
| linux / linux_kernel | 2.6.8-rc2 | 2.6.8-rc2.x |
| linux / linux_kernel | 2.6.8-rc3 | 2.6.8-rc3.x |
| linux / linux_kernel | 2.6.11.4 | 2.6.11.4.x |
| linux / linux_kernel | 2.6.0-test8 | 2.6.0-test8.x |
| linux / linux_kernel | 2.6.11.1 | 2.6.11.1.x |
| linux / linux_kernel | 2.6.6 | 2.6.6.x |
| linux / linux_kernel | 2.6.0-test3 | 2.6.0-test3.x |