block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SG_IO ioctl call that leverages overlapping opcodes.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2013-02-28 19:55
Updated : 2024-02-28 12:00
NVD link : CVE-2012-4542
Mitre link : CVE-2012-4542
CVE.ORG link : CVE-2012-4542
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-264
Permissions, Privileges, and Access Controls