Linux Kernel 'vhost/scsi.c' Local Memory Corruption Vulnerability

Bugtraq ID:	74664
Class:	Unknown
CVE:	CVE-2015-4036
Remote:	No
Local:	Yes
Published:	May 14 2015 12:00AM
Updated:	Feb 11 2016 07:48AM
Credit:	Dan Carpenter
Vulnerable:	Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.13 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 3.1.8 Linux kernel 3.0.5 Linux kernel 3.0.4 Linux kernel 3.0.2 Linux kernel 3.0.1 Linux kernel 3.2.2 Linux kernel 3.0.18 Linux kernel 3.0
Not Vulnerable:

Linux Kernel 'vhost/scsi.c' Local Memory Corruption Vulnerability

The Linux kernel is prone to a local memory-corruption vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Linux Kernel 'vhost/scsi.c' Local Memory Corruption Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Linux Kernel 'vhost/scsi.c' Local Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Linux Kernel 'vhost/scsi.c' Local Memory Corruption Vulnerability

References:

• Linux Homepage (Linux)