CVE-2010-4668

Description

The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4163.

Weakness classification

• CWE-400: Uncontrolled Resource Consumption

Primary references

• cve@mitre.org
• cve@mitre.org — Mailing List, Patch, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Mailing List, Patch, Third Party Advisory
• cve@mitre.org — Mailing List, Patch, Third Party Advisory
• cve@mitre.org — Mailing List, Patch, Third Party Advisory
• cve@mitre.org — Third Party Advisory, Vendor Advisory
• cve@mitre.org — Broken Link
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Patch, Third Party Advisory