First published: Tue Aug 04 2015(Updated: )
Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Linux kernel | >=2.6.0<4.1.0 | |
Canonical Ubuntu Linux | =12.04 | |
Canonical Ubuntu Linux | =14.04 | |
Canonical Ubuntu Linux | =15.04 | |
Debian Debian Linux | =7.0 | |
Debian Debian Linux | =8.0 | |
SUSE SUSE Linux Enterprise Desktop | =11-sp3 | |
SUSE SUSE Linux Enterprise Server | =11-sp2 | |
SUSE SUSE Linux Enterprise Server | =11-sp3 | |
Suse Suse Linux Enterprise Server Vmware | =11-sp3 | |
Google Android | ||
debian/linux | 5.10.223-1 5.10.226-1 6.1.106-3 6.1.112-1 6.11.4-1 6.11.5-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2015-5707 is medium.
CVE-2015-5707 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.
Linux kernel versions 2.6.x through 4.x before 4.1 are affected by CVE-2015-5707.
To fix CVE-2015-5707, update your Linux kernel to version 4.1~ or later.
You can find more information about CVE-2015-5707 at the following references: [1] [2] [3].