PT-2016-7322 · Linux+3 · Linux Kernel+3

Marco Grassi · Published 2016-10-16 · Updated 2024-06-15 · CVE-2016-7425

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.8.3

Description The issue allows local users to gain privileges or cause a denial of service due to a heap-based buffer overflow. This is caused by the arcmsr iop message xfer function in drivers/scsi/arcmsr/arcmsr hba.c not restricting a certain length field, which can be exploited via an ARCMSR MESSAGE WRITE WQBUFFER control code.

Recommendations For Linux kernel versions prior to 4.8.3, update to version 4.8.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the arcmsr iop message xfer function until a patch is available.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2016-2156

ALT-PU-2016-2157

CVE-2016-7425

DLA-670-1

DSA-3696-1

MGASA-2016-0411

MGASA-2016-0412

OPENSUSE-SU-2016_2583-1

OPENSUSE-SU-2016_2625-1

OPENSUSE-SU-2016_3021-1

OPENSUSE-SU-2024:10128-1

SUSE-SU-2016:2912-1

SUSE-SU-2016:2976-1

SUSE-SU-2016:3069-1

SUSE-SU-2016:3304-1

SUSE-SU-2017:0181-1

SUSE-SU-2017:0333-1

SUSE-SU-2017:0471-1

SUSE-SU-2017:0494-1

USN-3144-1

USN-3144-2

USN-3145-1

USN-3145-2

USN-3146-1

USN-3146-2

USN-3147-1

USN-3161-3

USN-3161-4

USN-3162-2

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 623

• https://github.com/torvalds/linux/commit/7bc2b55a5c030685b399bb65b6baa9ccc3d1f167 · Patch
• https://osv.dev/vulnerability/USN-3161-4 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0411 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0412.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2017:0181-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3147-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-3533.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9644 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3145-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0412 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8964 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-3534.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3161-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6213 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3145-2 · Vendor Advisory