PT-2016-5199 · Linux+3 · Linux Kernel+3

Dmitry Vyukov · Published 2016-01-13 · Updated 2017-09-07 · CVE-2016-2547

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1

Description The issue allows local users to cause a denial of service, resulting in a race condition, use-after-free, and system crash via a crafted ioctl call. This is due to a locking approach in sound/core/timer.c that does not consider slave timer instances.

Recommendations For Linux kernel versions prior to 4.4.1, update to version 4.4.1 or later to resolve the issue.

Fix

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2016-1018

ALT-PU-2016-1485

CVE-2016-2547

DSA-3503-1

OPENSUSE-SU-2016_2144-1

SUSE-SU-2016:0911-1

SUSE-SU-2016:1102-1

SUSE-SU-2016:1203-1

SUSE-SU-2016:2074-1

USN-2929-1

USN-2929-2

USN-2930-1

USN-2930-2

USN-2930-3

USN-2931-1

USN-2932-1

USN-2967-1

USN-2967-2

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 251

• https://github.com/torvalds/linux/commit/b5a663aa426f4884c71cd8580adae73f33570f0d · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8767 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-2547 · Security Note
• https://ubuntu.com/security/CVE-2016-2546 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2069 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3503-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2929-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-2930-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-2967-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2930-2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2074-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2544 · Vendor Advisory
• http://ubuntu.com/usn/USN-2929-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2967-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-2547 · Vendor Advisory