CVE-2015-4036 in Kernel

Resumen (Inglés)

Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call. NOTE: the affected function was renamed to vhost_scsi_make_tpg before the vulnerability was announced.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2015-05-19

Divulgación

2015-08-31

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
75565	Linux Kernel vhost/scsi desbordamiento de búfer	119	No probado	Arreglo oficial	CVE-2015-4036

Fuentes

• MITRE
• NVD
• CVE Details