Total vulnerabilities in the database
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 2.2.16 | 2.16.16.x |
| debian / debian_linux | 3.1 | 3.1.x |
| canonical / ubuntu_linux | 5.04 | 5.04.x |
| canonical / ubuntu_linux | 5.10 | 5.10.x |
| canonical / ubuntu_linux | 6.06 | 6.06.x |