Published: 23/05/2016 Updated: 17/01/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Subscribe to Linux Kernel

The InfiniBand (aka IB) stack in the Linux kernel prior to 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 15.10
canonical ubuntu linux 14.04
canonical ubuntu linux 16.04
canonical ubuntu linux 12.04
debian debian linux 8.0

Debian Bug report logs - #823603 linux: CVE-2016-4557: [Local root exploit] Use after free via double-fdput in bpf Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: <mike_b@tutanotacom> Date: Fri, 6 May 2016 12:18:01 UTC Severity: critical Tags: securi ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2015-7515, CVE-2016-2184, CVE-2016-2185, CVE-2016-2186, CVE-2016-2187, CVE-2016-3136, CVE-2016-3137, CVE-2016-3138, CVE-2016-3140 Ralf Spenneberg of OpenSource Sec ...

The Linux kernel did not properly suppress hugetlbfs support in x86 PV guests, which could allow local PV guest users to cause a denial of service (guest OS crash) by attempting to access a hugetlbfs mapped area (CVE-2016-3961 / XSA-174) A flaw was found in the way the Linux kernel's ASN1 DER decoder processed certain certificate files with tags ...

A flaw was found in the way certain interfaces of the Linux kernel's Infiniband subsystem used write() as bi-directional ioctl() replacement, which could lead to insufficient memory security checks when being invoked using the splice() system call A local unprivileged user on a system with either Infiniband hardware present or RDMA Userspace Conne ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the kernel ...

CWE-264 https://github.com/torvalds/linux/commit/e6bd18f57aad1a2d1ef40e646d03ed0f2515c9e3 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3 http://www.openwall.com/lists/oss-security/2016/05/07/1 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e6bd18f57aad1a2d1ef40e646d03ed0f2515c9e3 https://bugzilla.redhat.com/show_bug.cgi?id=1310570 http://www.ubuntu.com/usn/USN-3018-1 http://www.ubuntu.com/usn/USN-3019-1 http://www.ubuntu.com/usn/USN-3018-2 https://access.redhat.com/errata/RHSA-2016:1341 https://access.redhat.com/errata/RHSA-2016:1277 https://access.redhat.com/errata/RHSA-2016:1301 http://www.ubuntu.com/usn/USN-3002-1 http://www.ubuntu.com/usn/USN-3001-1 http://www.ubuntu.com/usn/USN-3004-1 http://www.ubuntu.com/usn/USN-3003-1 http://www.ubuntu.com/usn/USN-3021-1 http://www.ubuntu.com/usn/USN-3005-1 http://www.ubuntu.com/usn/USN-3021-2 http://www.ubuntu.com/usn/USN-3007-1 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html http://www.ubuntu.com/usn/USN-3006-1 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html http://www.securityfocus.com/bid/90301 http://www.debian.org/security/2016/dsa-3607 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html http://rhn.redhat.com/errata/RHSA-2016-1617.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html http://rhn.redhat.com/errata/RHSA-2016-1581.html http://rhn.redhat.com/errata/RHSA-2016-1657.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html http://rhn.redhat.com/errata/RHSA-2016-1489.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html http://rhn.redhat.com/errata/RHSA-2016-1640.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html http://rhn.redhat.com/errata/RHSA-2016-1814.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html https://access.redhat.com/errata/RHSA-2016:1406 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823603 https://usn.ubuntu.com/3018-2/https://www.debian.org/security/./dsa-3607

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook