CVE-2011-2906

MEDIUM

Linux Kernel < 3.1 - Denial of Service via pmcraid_ioctl_passthrough Negative Size Value

Title source: llm
STIX 2.1

Description

Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a denial of service (memory consumption or memory corruption) via a negative size value in an ioctl call. NOTE: this may be a vulnerability only in unusual environments that provide a privileged program for obtaining the required file descriptor.

References (4)

Core 4

Scores

CVSS v3 5.5
EPSS 0.0048
EPSS Percentile 37.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-400
Status published
Products (1)
linux/linux_kernel < 3.1
Published May 24, 2012
Tracked Since Feb 18, 2026