CVE-2011-2906 in Linux Kernel
Summary
** DISPUTED ** Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a denial of service (memory consumption or memory corruption) via a negative size value in an ioctl call. NOTE: this may be a vulnerability only in unusual environments that provide a privileged program for obtaining the required file descriptor.
Reservation
07/27/2011
Disclosure
05/24/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 60831 | Linux Kernel pmcraid_ioctl_passthrough numeric error | 189 | Not defined | Official fix | CVE-2011-2906 |