This issue did not affect the versions of Linux kernel as shipped with Red Hat
Enterprise Linux 4 and 5 as they do not have support for the I/O-Warrior USB devices. This has been addressed in Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0330.html. A future kernel update in Red Hat Enterprise Linux 6 may address this flaw.
CVSS v2 metrics
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
|Red Hat Enterprise Linux 6 (kernel)||RHSA-2011:0421||2011-04-08|
|MRG Grid for RHEL 5 Server (kernel-rt)||RHSA-2011:0330||2011-03-10|
AcknowledgementsRed Hat would like to thank Kees Cook for reporting this issue.
CVE description copyright © 2017, The MITRE Corporation