PT-2019-7539 · Linux+4 · Linux Kernel+4

Publicado

2017-01-18

·

Atualizado

2019-05-28

·

CVE-2016-10741

CVSS v3.1

4.7

Média

VetorAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.3
Description The issue is related to a race condition between direct and memory-mapped I/O in the Linux kernel, specifically in the fs/xfs/xfs aops.c file. This condition can be exploited by local users to cause a denial of service, resulting in a system crash. The race condition occurs when handling a hole, and instead of returning an I/O failure, the kernel uses BUG ON, leading to the system crash.
Recommendations For Linux kernel versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue.

Correção

DoS

Race Condition

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

ALT-PU-2017-1050
ALT-PU-2017-1330
CESA-2017_1842
CVE-2016-10741
DLA-1731-1
DLA-1731-2
RHSA-2017:1842
RHSA-2017:2077
RHSA-2017:2669
RHSA-2017_1842
RHSA-2017_2077
SUSE-SU-2019:1289-1
SUSE-SU-2019:13979-1
SUSE-SU-2019_1289-1
SUSE-SU-2019_13979-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse