Wind River Support Network

HomeDefectsLIN8-5130
Fixed

LIN8-5130 : Security Advisory - linux - CVE-2015-8962

Created: Nov 17, 2016    Updated: Dec 3, 2018
Resolved Date: Nov 21, 2016
Found In Version: 8.0
Fix Version: 8.0.0.12
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Kernel

Description

Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8962

Other Downloads


CVEs


Live chat
Online