PT-2016-5196 · Linux+3 · Linux Kernel+3
Dmitry Vyukov
·
Publicado
2016-01-13
·
Atualizado
2017-09-07
·
CVE-2016-2544
CVSS v3.1
5.1
Média
| Vetor | AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.4.1
Description
The issue is related to a race condition in the
queue delete function, which can be exploited by local users to cause a denial of service. This can result in a use-after-free condition and potentially crash the system. The exploitation is possible by making an ioctl call at a specific time.Recommendations
For versions prior to 4.4.1, update to version 4.4.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the
queue delete function in the sound/core/seq/seq queue.c module to minimize the risk of exploitation.Correção
DoS
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Suse
Ubuntu