PT-2019-7560 · Linux+1 · Linux Kernel+1

Published 2017-01-26 · Updated 2023-01-19 · CVE-2016-10764

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.6

Description The issue is related to an off-by-one error in the cqspi setup flash() function, located in the drivers/mtd/spi-nor/cadence-quadspi.c file. This error occurs because there are CQSPI MAX CHIPSELECT elements in the ->f pdata array, and the condition should be ">=" instead of ">".

Recommendations For Linux kernel versions prior to 4.9.6, update to version 4.9.6 or later to resolve the issue. As a temporary workaround, consider modifying the cqspi setup flash() function to correct the off-by-one error by changing the condition to ">=" instead of ">".

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2017-1088

CVE-2016-10764

Affected Products

Alt Linux

Linux Kernel

References · 14

• https://github.com/torvalds/linux/commit/193e87143c290ec16838f5368adc0e0bc94eb931 · Patch
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=193e87143c290ec16838f5368adc0e0bc94eb931 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-10764 · Security Note
• https://osv.dev/vulnerability/CVE-2016-10764 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-10764 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-10764 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10764 · Security Note
• https://ubuntu.com/security/CVE-2016-10764 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-10764 · Vendor Advisory
• https://git.kernel.org/linus/193e87143c290ec16838f5368adc0e0bc94eb931 · Note
• https://support.f5.com/csp/article/K24444495?utm_source=f5support&amp%3Butm_medium=RSS · Note
• https://support.f5.com/csp/article/K24444495 · Note
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6 · Note
• https://t.me/cibsecurity/5752 · Telegram Post