Every CVESearch/Get API key

CVE-2011-1494

Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the...

6.9 Medium

CVE-2011-1494 is a medium vulnerability (CVSS 6.9) in Linux Kernel, published May 3, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. No source names a fixed version.

What does this mean?
Severity
6.9 MediumCVSS 2.0, NVD
Exploit chance
0.37%EPSS, 31st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.

Exploit likelihood

0.37%Down 0.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-2.6
Debian:6.0
From an advisory covering 36 CVEs
before 2.6.32-34squeeze1, plus listed versions
2.6.32-302.6.32-30+m68k.52.6.32-312.6.32-31~bpo50+12.6.32-322.6.32-332.6.32-34
2.6.32-34squeeze1
kernel
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debug
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-doc
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
Show 98 moreShow less
Affected packages
PackageAffectedFixed
kernel-firmware
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-headers
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
perf
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
perf-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debug
Red Hat:enterprise_linux:6::computenode
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::computenode
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-doc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-firmware
Red Hat:enterprise_linux:6::computenode
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-headers
Red Hat:enterprise_linux:6::computenode
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
perf
Red Hat:enterprise_linux:6::computenode
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
perf-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-bootwrapper
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debug
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-doc
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-firmware
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-headers
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-kdump
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-kdump-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-kdump-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
perf
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
perf-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debug
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-doc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-firmware
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel-headers
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
perf
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
perf-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 15 CVEs
before 0:2.6.32-131.0.15.el6
0:2.6.32-131.0.15.el6
kernel
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-PAE
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-debug
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-doc
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-kdump
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-kdump-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-kdump-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-xen
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.6.18-238.12.1.el5
0:2.6.18-238.12.1.el5
kernel
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-bootwrapper
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-debug
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-debug-debuginfo
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-debug-devel
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-debuginfo
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-debuginfo-common-i686
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-debuginfo-common-ppc64
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-devel
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-doc
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-firmware
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-headers
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-kdump
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-kdump-debuginfo
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-kdump-devel
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
perf
Red Hat:rhel_eus:6.0
From an advisory covering 14 CVEs
before 0:2.6.32-71.31.1.el6
0:2.6.32-71.31.1.el6
kernel-rt
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-debug
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-debug-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-debug-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-doc
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-firmware
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-trace
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-trace-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-trace-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-vanilla
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-vanilla-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-vanilla-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt

What each source reports

NVD Score used6.9

Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.

Record
CVE-2011-1494
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.

Record
CVE-2011-1494
Updated
2026-11-02
EUVDEUVD-2011-1497No score

Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.

Record
EUVD-2011-1497
Updated
2026-11-03
GitHub AdvisoriesGHSA-6p2h-v272-fh65No score

Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the...

Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.

Record
GHSA-6p2h-v272-fh65
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 304 references. The JSON record has them.

MoveEnter Open