Description
The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.
References (14)
Core 14
Core References
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59134
Third Party Advisory x_refsource_confirm
https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1108744
Third Party Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2335-1
Third Party Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2334-1
Patch x_refsource_confirm
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/60564
Patch, Third Party Advisory x_refsource_confirm
https://github.com/torvalds/linux/commit/4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59777
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/61310
Mailing List, Patch, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/06/11/1
Broken Link mailing-list
x_refsource_mlist
http://permalink.gmane.org/gmane.linux.scsi.target.devel/6618
Scores
EPSS
0.0009
EPSS Percentile
25.5%
Details
CWE
CWE-200
Status
published
Products (34)
canonical/ubuntu_linux
12.04
f5/big-ip_access_policy_manager
12.0.0
f5/big-ip_access_policy_manager
11.1.0 - 11.6.0
f5/big-ip_advanced_firewall_manager
12.0.0
f5/big-ip_advanced_firewall_manager
11.3.0 - 11.6.0
f5/big-ip_analytics
12.0.0
f5/big-ip_analytics
11.1.0 - 11.6.0
f5/big-ip_application_acceleration_manager
12.0.0
f5/big-ip_application_acceleration_manager
11.4.0 - 11.6.0
f5/big-ip_application_security_manager
12.0.0
... and 24 more
Published
Jun 23, 2014
Tracked Since
Feb 18, 2026