PT-2017-1933 · Linux+1 · Linux Kernel+1

Published 2015-06-03 · Updated 2020-07-31 · CVE-2016-5870

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x

Description The issue is related to the msm ipc router close function in the ipc router component, which can cause a denial of service (NULL pointer dereference) or possibly have other unspecified impacts. This can be triggered by failure of an accept system call for an AF MSM IPC socket. The vulnerability can be exploited by a local attacker to cause a denial of service or other unspecified effects.

Recommendations For Linux kernel version 3.x, consider disabling the msm ipc router close function as a temporary workaround until a patch is available. Restrict access to the AF MSM IPC socket to minimize the risk of exploitation. Avoid using the accept system call for AF MSM IPC sockets until the issue is resolved.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2015-1485

ALT-PU-2015-1849

BDU:2017-01093

CVE-2016-5870

Affected Products

Alt Linux

Linux Kernel

References · 6

• https://osv.dev/vulnerability/CVE-2016-5870 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01093 · Security Note
• https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=71fe5361cbef34e2d606b79e8936a910a3e95566 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2016-5870 · Security Note
• https://codeaurora.org/null-pointer-dereference-when-processing-accept-system-call-user-process-afmsmipc-sockets-cve-2016 · Note
• http://securityfocus.com/bid/97414 · Note