PT-2016-5201 · Linux+3 · Linux Kernel+3
Dmitry Vyukov
·
Publicado
2016-01-13
·
Atualizado
2016-12-03
·
CVE-2016-2549
CVSS v3.1
6.2
Média
| Vetor | AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.4.1
Description
The issue allows local users to cause a denial of service (deadlock) via a crafted ioctl call due to the lack of prevention of recursive callback access in sound/core/hrtimer.c. This problem is not hypothetical and has been triggered by the syzkaller fuzzer. The previous fix is still insufficient, as it may cause a lockup when the ALSA timer instance reprograms itself in its callback, invoking the start function even in snd timer interrupt() that is called in hrtimer callback itself, resulting in a CPU stall.
Recommendations
For Linux kernel versions prior to 4.4.1, update to version 4.4.1 or later to resolve the issue. As a temporary workaround, consider disabling the
snd timer interrupt() function until a patch is available. Restrict access to the sound/core/hrtimer.c module to minimize the risk of exploitation. Avoid using the ioctl call in the affected API endpoint until the issue is resolved.Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Suse
Ubuntu