Severity : High Published : 2011-05-03 Modified : 2012-04-27 Base Score : 7.2 Details : drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions. Product/Version : MVL6 Kernel 2.6.30

CVE-2011-4914 CVE-2011-4913 CVE-2011-4885 CVE-2011-4619 CVE-2011-4578 CVE-2011-4577 CVE-2011-4576 CVE-2011-4566 CVE-2011-4330 CVE-2011-4324 CVE-2011-4317 CVE-2011-4313 CVE-2011-4132 CVE-2011-4130 CVE-2011-4127 CVE-2011-4110 CVE-2011-4109 CVE-2011-4108 CVE-2011-4081 CVE-2011-4077 CVE-2011-4029 CVE-2011-4028 CVE-2011-3639 CVE-2011-3607 CVE-2011-3389 CVE-2011-3378 CVE-2011-3368 CVE-2011-3363 CVE-2011-3359 CVE-2011-3353 CVE-2011-3348 CVE-2011-3210 CVE-2011-3209 CVE-2011-3192 CVE-2011-3191 CVE-2011-3188 CVE-2011-3149 CVE-2011-3148 CVE-2011-3026 CVE-2011-2898 CVE-2011-2896 CVE-2011-2895 CVE-2011-2834 CVE-2011-2724 CVE-2011-2699 CVE-2011-2695 CVE-2011-2694 CVE-2011-2692 CVE-2011-2691 CVE-2011-2690 CVE-2011-2534 CVE-2011-2525 CVE-2011-2522 CVE-2011-2501 CVE-2011-2496 CVE-2011-2494 CVE-2011-2492 CVE-2011-2491 CVE-2011-2484 CVE-2011-2213 CVE-2011-2212 CVE-2011-2202 CVE-2011-2192 CVE-2011-2182 CVE-2011-2022 CVE-2011-1945 CVE-2011-1944 CVE-2011-1938 CVE-2011-1928 CVE-2011-1833 CVE-2011-1776 CVE-2011-1767 CVE-2011-1760 CVE-2011-1759 CVE-2011-1751 CVE-2011-1750 CVE-2011-1747 CVE-2011-1746 CVE-2011-1745 CVE-2011-1677 CVE-2011-1676 CVE-2011-1675 CVE-2011-1659 CVE-2011-1658 CVE-2011-1593 CVE-2011-1592 CVE-2011-1591 CVE-2011-1590 CVE-2011-1577 CVE-2011-1573 CVE-2011-1495 CVE-2011-1494 CVE-2011-1493 CVE-2011-1477 CVE-2011-1182 CVE-2011-1173 CVE-2011-1172 CVE-2011-1171 CVE-2011-1170 CVE-2011-1163 CVE-2011-1155 CVE-2011-1098 CVE-2011-1095 CVE-2011-1093 CVE-2011-1090 CVE-2011-1082 CVE-2011-1071 CVE-2011-1044 CVE-2011-1017 CVE-2011-1013 CVE-2011-1012 CVE-2011-1010 CVE-2011-0997 CVE-2011-0719 CVE-2011-0711 CVE-2011-0695 CVE-2011-0539 CVE-2011-0536 CVE-2011-0521 CVE-2011-0465 CVE-2011-0463 CVE-2011-0419 CVE-2011-0014