The iowarrior_write function in drivers/usb/misc/iowarrior.c in the Linux kernel prior to 2.6.37 does not properly allocate memory, which might allow local users to trigger a heap-based buffer overflow, and consequently cause a denial of service or gain privileges, via a long report.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
linux linux kernel |
||
canonical ubuntu linux 8.04 |
Vulmon