CVE-2019-12456

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.1.5

Description An issue was discovered in the MPT3COMMAND case in ctl ioctl main in drivers/scsi/mpt3sas/mpt3sas ctl.c. It allows local users to cause a denial of service or possibly have unspecified other impact by changing the value of ioc number between two kernel reads of that value, aka a "double fetch" vulnerability. A third party reports that this is unexploitable because the doubly fetched value is not used.

Recommendations For Linux kernel versions through 5.1.5, consider upgrading to a version that includes a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.