The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device.
Product | Vendor | Version |
---|---|---|
n/a | n/a | 2.3.5.5-AIRGAP |