VULNERABILITY INTELLIGENCE

CVE-2011-2906

CVSS score5.5 MEDIUM
EPSS probability0.48%
CISA KEVNot currently listed
Published2012-05-24
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a denial of service (memory consumption or memory corruption) via a negative size value in an ioctl call. NOTE: this may be a vulnerability only in unusual environments that provide a privileged program for obtaining the required file descriptor.

Weakness classification

  • CWE-400: Uncontrolled Resource Consumption

Primary references