PT-2016-6969 · Linux+1 · Linux Kernel+1

Martin Prpič · Publicado 2016-08-06 · Atualizado 2025-09-29 · CVE-2016-6516

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.8

Description A race condition exists in the ioctl file dedupe range function, allowing local users to cause a denial of service or possibly gain privileges by changing a certain count value. This issue is related to a "double fetch" vulnerability.

Recommendations For Linux kernel versions prior to 4.8, update to version 4.8 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Race Condition

Enumeração de Fraquezas

CWE-119

CWE-362

Identificadores relacionados

ALSA-2025_16880

ALT-PU-2016-1862

ALT-PU-2017-1330

CVE-2016-6516

OPENSUSE-SU-2024:10128-1

Produtos afetados

Alt Linux

Linux Kernel

Referências · 97

• 🔥 https://github.com/wpengfei/CVE-2016-6516-exploit · Exploit
• https://github.com/torvalds/linux/commit/10eec60ce79187686e052092e5383c99b4420a20 · Correção
• https://suse.com/security/cve/CVE-2011-1180 · Nota
• https://suse.com/security/cve/CVE-2010-2954 · Nota
• https://suse.com/security/cve/CVE-2016-1583 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10128-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-6516 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2011-1577 · Nota
• https://suse.com/security/cve/CVE-2016-3135 · Nota
• https://suse.com/security/cve/CVE-2010-1436 · Nota
• https://suse.com/security/cve/CVE-2014-8133 · Nota
• https://suse.com/security/cve/CVE-2016-3689 · Nota
• https://security-tracker.debian.org/tracker/CVE-2016-6516 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2011-0711 · Nota
• https://suse.com/security/cve/CVE-2016-7039 · Nota