CVE-2014-4027

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.

• linux linux kernel (< 3.14) • redhat enterprise linux 6.0 • canonical ubuntu linux 12.04 • suse linux enterprise desktop 11 • suse linux enterprise high availability extension 11 • suse linux enterprise real time extension 11 • suse linux enterprise server 11 • f5 big-ip access policy manager (>= 11.1.0 <= 11.6.0) • f5 big-ip access policy manager 12.0.0 • f5 big-ip advanced firewall manager (>= 11.3.0 <= 11.6.0) • f5 big-ip advanced firewall manager 12.0.0 • f5 big-ip analytics (>= 11.1.0 <= 11.6.0) • f5 big-ip analytics 12.0.0 • f5 big-ip application acceleration manager (>= 11.4.0 <= 11.6.0) • f5 big-ip application acceleration manager 12.0.0 • f5 big-ip application security manager (>= 11.1.0 <= 11.6.0) • f5 big-ip application security manager 12.0.0 • f5 big-ip domain name system 12.0.0 • f5 big-ip edge gateway (>= 11.1.0 <= 11.3.0) • f5 big-ip global traffic manager (>= 11.1.0 <= 11.6.0) • f5 big-ip link controller (>= 11.1.0 <= 11.6.0) • f5 big-ip link controller 12.0.0 • f5 big-ip local traffic manager (>= 11.1.0 <= 11.6.0) • f5 big-ip local traffic manager 12.0.0 • f5 big-ip policy enforcement manager (>= 11.3.0 <= 11.6.0) • f5 big-ip policy enforcement manager 12.0.0 • f5 big-ip protocol security module (>= 11.1.0 <= 11.4.1) • f5 big-ip wan optimization manager (>= 11.1.0 <= 11.3.0) • f5 big-ip webaccelerator (>= 11.1.0 <= 11.3.0) • f5 big-iq application delivery controller 4.5.0 • f5 big-iq cloud (>= 4.0.0 <= 4.5.0) • f5 big-iq device (>= 4.2.0 <= 4.5.0) • f5 big-iq security (>= 4.0.0 <= 4.5.0) • f5 enterprise manager (>= 3.0.0 <= 3.1.1)