PT-2016-7425 · Linux+5 · Linux Kernel+5

Vegard Nossum · Published 2016-08-17 · Updated 2023-01-19 · CVE-2016-7910

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7.1

Description The issue is related to a use-after-free vulnerability in the disk seqf stop function. This vulnerability allows local users to gain privileges by executing a certain stop operation, even if the corresponding start operation had failed.

Recommendations For Linux kernel versions prior to 4.7.1, update to version 4.7.1 or later to resolve the issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2016-1853

ALT-PU-2016-1858

CESA-2017_0892

CESA-2017_1308

CVE-2016-7910

DLA-772-1

OPENSUSE-SU-2016_3061-1

RHSA-2017:0892

RHSA-2017:1297

RHSA-2017:1298

RHSA-2017:1308

RHSA-2017_0892

RHSA-2017_1298

RHSA-2017_1308

SUSE-SU-2017:0333-1

SUSE-SU-2017:0407-1

SUSE-SU-2017:0437-1

SUSE-SU-2017:0464-1

SUSE-SU-2017:0471-1

SUSE-SU-2017:0494-1

SUSE-SU-2017:1102-1

USN-3206-1

USN-3207-1

USN-3207-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 400

• 🔥 https://github.com/torvalds/linux/commit/77da160530dd1dc94f6ae15a981f24e5f0021e84 · Exploit
• 🔥 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=77da160530dd1dc94f6ae15a981f24e5f0021e84 · Exploit
• https://ubuntu.com/security/CVE-2016-7910 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-7910 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0407-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0494-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-0892.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3207-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-6074 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-3537.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-3539.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:1102-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0437-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:1298 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-7910 · Vendor Advisory