CVE-2012-4542: block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during...

Security readout for executives and security teams

This is an old Linux kernel access-control flaw. A local user could send certain SCSI commands through SG_IO and bypass restrictions meant to protect devices. The main concern is systems still running affected legacy kernels or vendor kernels without the referenced security updates. Exposure is most plausible on legacy Linux systems, appliances, or vendor-maintained kernels derived from affected code, especially where untrusted local users can access SG_IO-capable devices. Treat as a targeted legacy-system risk. It is not documented as actively exploited here, but systems with untrusted local users or exposed device access should be prioritized for kernel update or retirement. Mitigation focus: Apply relevant vendor kernel security updates, including applicable Red Hat advisories.; Confirm the kernel includes SG_IO whitelist conflict-resolution fixes.; Upgrade or retire unsupported kernels based on Linux 3.8 or earlier..

Prepared

Jun 15, 2026, 04:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.