Linux Kernel "mpt2sas" Local permission escalation and Information Leakage vulnerability and repair

Release date:

Updated on:
 
Affected Systems:
Linux kernel 2.6.x
RedHat Linux
Description:
--------------------------------------------------------------------------------
Bugtraq id: 47185
 
Cve id: CVE-2011-1494, CVE-2011-1495
Linux Kernel is the Kernel used by open source Linux.
 
Linux Kernel "mpt2sas" implementation vulnerabilities allow local attackers to exploit these vulnerabilities to leak sensitive information or execute arbitrary code with INCORE permissions.
 
<* Source: Dan Rosenberg (drosenberg@vsecurity.com)
*>
 
Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.kernel.org/