CVE-2015-4036 in Linux Kernel
Sumário (Inglês)
Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call. NOTE: the affected function was renamed to vhost_scsi_make_tpg before the vulnerability was announced.
Reservar
19/05/2015
Divulgação
31/08/2015
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 75565 | Linux Kernel vhost/scsi Excesso de tampão | 119 | Não provado | Correção oficial | CVE-2015-4036 |