block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SG_IO ioctl call that leverages overlapping opcodes.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-02-28 11:55
Updated : 2023-02-12 16:26
NVD link : CVE-2012-4542
Mitre link : CVE-2012-4542
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
linux
- linux_kernel