CVE-2010-4343

published 2010-12-29

CVE-2010-4343: drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to cause a denial of…

medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to cause a denial of service (system crash) via read operations on an fc_host statistics file.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
linux	linux_kernel	< 2.6.35	2.6.35
vmware	esx	—	—
vmware	esx	—	—
vmware	vmware_esxi	—	—
vmware	vmware_workstation	—	—
vmware	vsphere	—	—

CWE-665