CVE-2017-14991

2017-10-04T01:29:00
ID CVE-2017-14991
Type cve
Reporter cve@mitre.org
Modified 2018-08-24T10:29:00

Description

The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from uninitialized kernel heap-memory locations via an SG_GET_REQUEST_TABLE ioctl call for /dev/sg0.