PT-2016-5200 · Linux+3 · Linux Kernel+3

Dmitry Vyukov

·

Publicado

2016-01-13

·

Atualizado

2017-09-07

·

CVE-2016-2548

CVSS v3.1

6.2

Média

VetorAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1
Description The issue allows local users to cause a denial of service, resulting in a system crash, via a crafted ioctl call. This is related to the snd timer close and snd timer stop functions in the sound/core/timer.c file.
Recommendations For Linux kernel versions prior to 4.4.1, update to version 4.4.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ioctl call related to the snd timer close and snd timer stop functions to minimize the risk of exploitation.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2016-1018
ALT-PU-2016-1485
CVE-2016-2548
DSA-3503-1
OPENSUSE-SU-2016_2144-1
SUSE-SU-2016:0911-1
SUSE-SU-2016:1102-1
SUSE-SU-2016:1203-1
SUSE-SU-2016:2074-1
USN-2929-1
USN-2929-2
USN-2930-1
USN-2930-2
USN-2930-3
USN-2931-1
USN-2932-1
USN-2967-1
USN-2967-2

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu