Note:
This project will be discontinued after December 13, 2021. [more]
2017-09-15
The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to cause a denial of service (panic) by leveraging incorrect length validation.
| Products | Linux_kernel |
| Type | Improper Input Validation (CWE-20) |
| First patch | - None (likely due to unavailable code) |
| Links |
• https://patchwork.kernel.org/patch/9923803/
• https://bugzilla.redhat.com/show_bug.cgi?id=1490421 • https://www.exploit-db.com/exploits/42932/ • https://usn.ubuntu.com/3583-2/ • https://usn.ubuntu.com/3583-1/ |