CWE Code: 189
Vulnerability Type: privilege_escalation
CVSS Score: 4.9
CWE Name:  Numeric Errors
Summary: ** disputed ** integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the linux kernel before 3.1 might allow local users to cause a denial of service (memory consumption or memory corruption) via a negative size value in an ioctl call.  note: this may be a vulnerability only in unusual environments that provide a privileged program for obtaining the required file descriptor.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/NONE/COMPLETE
Published Date: 2012-05-24
Last Modified Date: 2012-05-30