Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | 2.6.0 (including) | 2.6.0 (including) |
| Linux_kernel | Linux | 2.6.1 (including) | 2.6.1 (including) |
| Linux_kernel | Linux | 2.6.2 (including) | 2.6.2 (including) |
| Linux_kernel | Linux | 2.6.3 (including) | 2.6.3 (including) |
| Linux_kernel | Linux | 2.6.4 (including) | 2.6.4 (including) |
| Linux_kernel | Linux | 2.6.5 (including) | 2.6.5 (including) |
| Linux_kernel | Linux | 2.6.6 (including) | 2.6.6 (including) |
| Linux_kernel | Linux | 2.6.7 (including) | 2.6.7 (including) |
| Linux_kernel | Linux | 2.6.8 (including) | 2.6.8 (including) |
| Linux_kernel | Linux | 2.6.9-2.6.20 (including) | 2.6.9-2.6.20 (including) |
| Linux_kernel | Linux | 2.6.10 (including) | 2.6.10 (including) |
| Linux_kernel | Linux | 2.6.11 (including) | 2.6.11 (including) |
| Linux_kernel | Linux | 2.6.12 (including) | 2.6.12 (including) |
| Linux_kernel | Linux | 2.6.13 (including) | 2.6.13 (including) |
| Red Hat Enterprise Linux 4 | RedHat | kernel-0:2.6.9-22.0.2.EL | * |