CVE-2015-4036 in Linux Kernel
요약 (영어)
Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call. NOTE: the affected function was renamed to vhost_scsi_make_tpg before the vulnerability was announced.
예약하다
2015. 05. 19.
공개
2015. 08. 31.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 75565 | Linux Kernel vhost/scsi 메모리 손상 | 119 | 입증되지 않음 | 공식 수정 | CVE-2015-4036 |