Back to search
CVE-2012-4542
Published: Feb 28, 2013
Modified: Aug 6, 2024
PUBLISHED
Description
block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SG_IO ioctl call that leverages overlapping opcodes.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
RHSA-2013:0496
vendor-advisory
x_refsource_REDHAT
RHSA-2013:0882
vendor-advisory
x_refsource_REDHAT
RHSA-2013:0928
vendor-advisory
x_refsource_REDHAT
[linux-kernel] 20130124 [PATCH 00/13] Corrections and customization of the SG_IO command whitelist (CVE-2012-4542)
mailing-list
x_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=875360
x_refsource_CONFIRM
RHSA-2013:0579
vendor-advisory
x_refsource_REDHAT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now