Published: 23/05/2016 Updated: 25/03/2019

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 215

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

sound/core/timer.c in the Linux kernel up to and including 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04
canonical ubuntu linux 15.10
canonical ubuntu linux 16.04
debian debian linux 8.0
redhat enterprise linux server tus 7.3
redhat enterprise linux server aus 7.4
redhat enterprise linux server eus 7.3
redhat enterprise linux workstation 7.0
redhat enterprise linux server aus 7.6
redhat enterprise linux server eus 7.4
redhat enterprise linux server eus 7.5
redhat enterprise linux server eus 7.6
redhat enterprise linux server 7.0
redhat enterprise linux server aus 7.3
redhat enterprise linux server tus 7.6
redhat enterprise linux desktop 7.0
opensuse opensuse 13.1
opensuse leap 42.1

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2015-7515, CVE-2016-2184, CVE-2016-2185, CVE-2016-2186, CVE-2016-2187, CVE-2016-3136, CVE-2016-3137, CVE-2016-3138, CVE-2016-3140 Ralf Spenneberg of OpenSource Sec ...

A vulnerability was found in Linux kernel There is an information leak in file sound/core/timerc of the latest mainline Linux kernel The stack object “r1” has a total size of 32 bytes Its field “event” and “val” both contain 4 bytes padding These 8 bytes padding bytes are sent to user without being initialized ...

Several security issues were fixed in the kernel ...

#include <stdioh> #include <errnoh> #include <stringh> #include <unistdh> #include <stdinth> #include <sys/syscallh> #include <asm/unistd_64h> #include <sys/typesh> #include <sys/stath> #include <fcntlh> #include <sys/mmanh> #include <sys/stath> #include <sys/ioc ...

Linux Kernel version 44 (Ubuntu 1604) suffers from a snd_timer_user_ccallback() kernel pointer leak vulnerability ...

CWE-200 https://github.com/torvalds/linux/commit/9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6 https://github.com/torvalds/linux/commit/e4ec8cc8039a7063e24204299b462bd1383184a5 https://bugzilla.redhat.com/show_bug.cgi?id=1335215 http://www.openwall.com/lists/oss-security/2016/05/11/5 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4ec8cc8039a7063e24204299b462bd1383184a5 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6 http://www.ubuntu.com/usn/USN-3017-2 http://www.ubuntu.com/usn/USN-3018-2 http://www.ubuntu.com/usn/USN-3016-4 http://www.ubuntu.com/usn/USN-3016-1 http://www.ubuntu.com/usn/USN-3016-2 http://www.ubuntu.com/usn/USN-3016-3 http://www.ubuntu.com/usn/USN-3018-1 http://www.ubuntu.com/usn/USN-3019-1 http://www.ubuntu.com/usn/USN-3017-3 http://www.ubuntu.com/usn/USN-3020-1 http://www.ubuntu.com/usn/USN-3017-1 http://www.ubuntu.com/usn/USN-3021-1 http://www.ubuntu.com/usn/USN-3021-2 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html http://www.debian.org/security/2016/dsa-3607 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html http://www.securityfocus.com/bid/90535 http://rhn.redhat.com/errata/RHSA-2016-2584.html http://rhn.redhat.com/errata/RHSA-2016-2574.html https://www.exploit-db.com/exploits/46529/https://access.redhat.com/errata/RHSA-2016:2574 https://nvd.nist.gov https://www.exploit-db.com/exploits/46529 https://usn.ubuntu.com/3018-2/https://www.debian.org/security/./dsa-3607

CVE-2016-4578

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect