CVE-2009-3288
- State
- Published
- Severity
- Not scored
- Published
- Sep 22, 2009
- Updated
- Aug 7, 2024
- Reserved
- Sep 22, 2009
Description
The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service (kernel OOPS and NULL pointer dereference), as demonstrated by using xcdroast to duplicate a CD. NOTE: this is only exploitable by users who can open the cdrom device.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [linux-kernel] 20090903 [PATCH] sg: fix oops in the error path in sg_build_indirect()mailing-list
- [oss-security] 20090904 CVE request: kernel: NULL pointer dereference in sg_build_indirect()mailing-list
- USN-852-1vendor-advisory
- [linux-kernel] 20090902 [BUG] 2.6.31-rc8 readcd Oopsmailing-list
- 37105third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.